9.0
Critique
CVE-2023-4020 An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon…
Description
An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows reading/writing of memory in the secure region of memory from the non-secure region of memory.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| GSDK 1.0 | 1.0 → < 4.4.0 | 4.4.0 |
Autres CVE de GSDK
Les 12 CVE de GSDK →
CVE-2024-22473
TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices
6.8
Moyenne
CVE-2024-0240
A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending…
6.5
Moyenne
CVE-2023-6874
Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number
7.5
Élevée
CVE-2023-6387
A potential buffer overflow exists in the Bluetooth LE HCI CPC sample application in the Gecko SDK which may result in a…
7.5
Élevée