← voltar
CVE-2023-3488

Uninitialized variable in Gecko Bootloader can leak secure stack

CVSS 3.8 LOWEPSS 0.2%CWE-908
Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Produtos afetados
silabs.com · Gecko Bootloader

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000Wi3HwQAJ?operationContext=S1https://github.com/SiliconLabs/gecko_sdk/releases