CVE-2023-3488

Uninitialized variable in Gecko Bootloader can leak secure stack

CVSS 3.8 LOWEPSS 0.2%CWE-908

Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Affected products

silabs.com · Gecko Bootloader

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000Wi3HwQAJ?operationContext=S1 https://github.com/SiliconLabs/gecko_sdk/releases