Vulnerabilities (CVE)

Filtered by vendor Silabs Subscribe
Filtered by product Gecko Software Development Kit
Total 27 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-32098 1 Silabs 1 Gecko Software Development Kit 2023-05-25 N/A 7.5 HIGH
Compiler removal of buffer clearing in sli_se_sign_message in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.
CVE-2023-32097 1 Silabs 1 Gecko Software Development Kit 2023-05-25 N/A 7.5 HIGH
Compiler removal of buffer clearing in sli_crypto_transparent_aead_decrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.
CVE-2023-32096 1 Silabs 1 Gecko Software Development Kit 2023-05-25 N/A 7.5 HIGH
Compiler removal of buffer clearing in sli_crypto_transparent_aead_encrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.
CVE-2023-2481 1 Silabs 1 Gecko Software Development Kit 2023-05-25 N/A 7.5 HIGH
Compiler removal of buffer clearing in sli_se_opaque_import_key in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.
CVE-2023-1132 1 Silabs 1 Gecko Software Development Kit 2023-05-25 N/A 7.5 HIGH
Compiler removal of buffer clearing in sli_se_driver_key_agreement in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.
CVE-2023-0965 1 Silabs 1 Gecko Software Development Kit 2023-05-25 N/A 7.5 HIGH
Compiler removal of buffer clearing in sli_cryptoacc_transparent_key_agreement in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.
CVE-2023-0775 1 Silabs 1 Gecko Software Development Kit 2023-04-04 N/A 6.5 MEDIUM
An invalid ‘prepare write request’ command can cause the Bluetooth LE stack to run out of memory and fail to be able to handle subsequent connection requests, resulting in a denial-of-service.