low3.8
CVE-2023-3488
Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file.
Impact
Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Silabs | Gecko Software Development Kit | through 4.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000Wi3HwQAJ?operationContext=S1
- https://github.com/SiliconLabs/gecko_sdk/releases
- https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000Wi3HwQAJ?operationContext=S1
- https://github.com/SiliconLabs/gecko_sdk/releases