| CVE-2024-22473 |
TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices
|
6.8
Medium
|
Feb 21, 2024 |
| CVE-2024-0240 |
A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending…
|
6.5
Medium
|
Feb 15, 2024 |
| CVE-2023-6874 |
Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number
|
7.5
High
|
Feb 5, 2024 |
| CVE-2023-6387 |
A potential buffer overflow exists in the Bluetooth LE HCI CPC sample application in the Gecko SDK which may result in a…
|
7.5
High
|
Feb 2, 2024 |
| CVE-2023-5138 |
Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB,…
|
6.8
Medium
|
Jan 3, 2024 |
| CVE-2023-4280 |
An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an…
|
9.3
Critical
|
Jan 2, 2024 |
| CVE-2023-41097 |
An Observable Timing Discrepancy, Covert Timing Channel vulnerability in Silabs GSDK on ARM potentially allows Padding…
|
4.6
Medium
|
Dec 21, 2023 |
| CVE-2023-4020 |
An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon…
|
9.0
Critical
|
Dec 15, 2023 |
| CVE-2023-3487 |
An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when…
|
7.7
High
|
Oct 20, 2023 |
| CVE-2023-3024 |
Forcing the Bluetooth LE stack to segment 'prepare write response' packets can lead to an out-of-bounds memory access
|
5.9
Medium
|
Sep 29, 2023 |
| CVE-2023-2747 |
The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is…
|
3.1
Low
|
Jun 15, 2023 |
| CVE-2023-0775 |
An invalid ‘prepare write request’ command can cause the Bluetooth LE stack to run out of memory and fail to be able…
|
6.5
Medium
|
Mar 28, 2023 |