Medium severity4.6NVD Advisory· Published Dec 21, 2023· Updated Jun 17, 2026
CVE-2023-41097
CVE-2023-41097
Description
An Observable Timing Discrepancy, Covert Timing Channel vulnerability in Silabs GSDK on ARM potentially allows Padding Oracle Crypto Attack on CBC PKCS7.This issue affects GSDK: through 4.4.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4<=4.4.0+ 1 more
- (no CPE)range: <=4.4.0
- (no CPE)range: 0
- Range: <=4.4.0
- cpe:2.3:a:silabs:gecko_software_development_kit:*:*:*:*:*:*:*:*Range: <=4.4.0
Patches
Vulnerability mechanics
References
2- github.com/SiliconLabs/gecko_sdk/releasesnvdRelease Notes
- siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000007rArIAInvdPermissions Required
News mentions
0No linked articles in our index yet.