| CVE-2024-22473 |
TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices
|
6.8
Moyenne
|
21 févr. 2024 |
| CVE-2024-0240 |
A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending…
|
6.5
Moyenne
|
15 févr. 2024 |
| CVE-2023-6874 |
Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number
|
7.5
Élevée
|
5 févr. 2024 |
| CVE-2023-6387 |
A potential buffer overflow exists in the Bluetooth LE HCI CPC sample application in the Gecko SDK which may result in a…
|
7.5
Élevée
|
2 févr. 2024 |
| CVE-2023-5138 |
Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB,…
|
6.8
Moyenne
|
3 janv. 2024 |
| CVE-2023-4280 |
An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an…
|
9.3
Critique
|
2 janv. 2024 |
| CVE-2023-41097 |
An Observable Timing Discrepancy, Covert Timing Channel vulnerability in Silabs GSDK on ARM potentially allows Padding…
|
4.6
Moyenne
|
21 déc. 2023 |
| CVE-2023-4020 |
An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon…
|
9.0
Critique
|
15 déc. 2023 |
| CVE-2023-3487 |
An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when…
|
7.7
Élevée
|
20 oct. 2023 |
| CVE-2023-3024 |
Forcing the Bluetooth LE stack to segment 'prepare write response' packets can lead to an out-of-bounds memory access
|
5.9
Moyenne
|
29 sept. 2023 |
| CVE-2023-2747 |
The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is…
|
3.1
Faible
|
15 juin 2023 |
| CVE-2023-0775 |
An invalid ‘prepare write request’ command can cause the Bluetooth LE stack to run out of memory and fail to be able…
|
6.5
Moyenne
|
28 mars 2023 |