← All advisories

Unrated severityNVD Advisory· Published Jul 28, 2023· Updated Oct 11, 2024

Uninitialized variable in Gecko Bootloader can leak secure stack

CVE-2023-3488

Description

Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Silabs.com/GSDKllm-fuzzy
Range: <=4.3.0
silabs.com/Gecko Bootloaderv5
Range: 0

Patches

Vulnerability mechanics

References

2

github.com/SiliconLabs/gecko_sdk/releasesmitrepatch
community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000Wi3HwQAJmitrevendor-advisory

News mentions

0

No linked articles in our index yet.