3.1
Faible
CVE-2023-32097 Compiler removal of buffer clearing in sli_crypto_transparent_aead_decrypt_tag in Silicon Labs Gecko Platform SDK…
Description
Compiler removal of buffer clearing in sli_crypto_transparent_aead_decrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Gecko Platform 4.2 | premières → < 4.2.2 | 4.2.2 |
Autres CVE de Gecko Platform
Les 10 CVE de Gecko Platform →
CVE-2023-2686
Buffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or earlier allows connected…
9.8
Critique
CVE-2023-32100
Compiler removal of buffer clearing in sli_se_driver_mac_compute in Silicon Labs Gecko Platform SDK v4.2.1 and…
5.3
Moyenne
CVE-2023-32099
Compiler removal of buffer clearing in sli_se_sign_hash in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results…
5.3
Moyenne
CVE-2023-32098
Compiler removal of buffer clearing in sli_se_sign_message in Silicon Labs Gecko Platform SDK v4.2.1 and earlier…
5.3
Moyenne