3.8
Low
CVE-2023-3488 Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure…
Description
Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Gecko Bootloader 4.3 | earliest → 4.3.0 | No fix stated |