GS
Product
GSDK
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 3Low 0
Watch
Add GSDK to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4280 | 9.8 | Jan 2 | Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region Affected: 1.0 through 4.3.x |
| CVE-2023-4020 | 9.1 | Dec 15 | Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memory Affected: 1.0 before 4.4.0 |
| CVE-2023-3487 | 7.8 | Oct 20 | Integer overflow in Silicon Labs Gecko Bootloader leads to unbounded memory access Affected: 1.0 through 4.3.1 |
| CVE-2024-22473 | 7.5 | Feb 21 | Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices Affected: through 4.4.0 |
| CVE-2023-6874 | 7.5 | Feb 5 | Zigbee Unauthenticated DoS via NWK Sequence number manipulation Affected: 0.0 before 7.4.0 |
| CVE-2023-6387 | 7.5 | Feb 2 | Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow Affected: 1.0 before 4.4.0 |
| CVE-2023-41097 | 7.5 | Dec 21 | Potential Timing vulnerability in CBC PKCS7 padding calculations Affected: before 4.4.0 |
| CVE-2023-5138 | 6.8 | Jan 3 | Glitch detection not active by default in Silicon Labs Secure Vault High devices Affected: 1.0 before 4.4.0 |
| CVE-2024-0240 | 6.5 | Feb 15 | Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients Affected: before 4.3.0 |
| CVE-2023-3024 | 6.5 | Sep 29 | Bluetooth LE segmented 'prepare write response' packet may lead to out-of-bounds memory access Affected: 1.0.0 before 6.0.0 |
Showing 10
