GS
Product
Gecko Software Development Kit
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 13Medium 7Low 1
Watch
Add Gecko Software Development Kit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5138 | 6.8 | Jan 3 | Glitch detection not active by default in Silicon Labs Secure Vault High devices Affected: 1.0.0 before 4.4.0 |
| CVE-2024-0240 | 6.5 | Feb 15 | Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients Affected: before 4.3.0 |
| CVE-2023-3024 | 6.5 | Sep 29 | Bluetooth LE segmented 'prepare write response' packet may lead to out-of-bounds memory access Affected: 1.0.0 before 6.0.0 |
| CVE-2023-0775 | 6.5 | Mar 28 | Bluetooth LE Invalid prepare write request command leads to denial of service Affected: 5.1.0; 5.1.1 |
| CVE-2022-24939 | 6.5 | Nov 17 | Malformed Zigbee packet with invalid destination address causes Assert Affected: All versions, or not specified |
| CVE-2023-3488 | 5.5 | Jul 28 | Uninitialized variable in Gecko Bootloader can leak secure stack Affected: through 4.3.0 |
| CVE-2023-2747 | 5.5 | Jun 15 | Uninitialized IV in Silicon Labs SE FW v2.0.0 through v 2.2.1 for internally stored data Affected: 2.0.0 before 2.2.1 |
Showing 7
