low3.1
CVE-2023-32097
Compiler removal of buffer clearing in sli_crypto_transparent_aead_decrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material du…
Impact
Compiler removal of buffer clearing in sli_crypto_transparent_aead_decrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Silabs | Gecko Software Development Kit | through 4.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000U19lGQAR?operationContext=S1
- https://github.com/SiliconLabs/gecko_sdk
- https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000U19lGQAR?operationContext=S1
- https://github.com/SiliconLabs/gecko_sdk