{"id":"CVE-2023-4280","aliases":["EUVD-2023-54151","GHSA-3rwq-pxmh-pw55"],"status":"published","title":"Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region","description":"An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.","severity":{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00403,"percentile":0.35076,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125","CWE-787"],"published":"2024-01-02T16:52:06Z","modified":"2026-10-28T02:31:11Z","products":[{"vendor":"silabs","product":"gecko_software_development_kit"},{"vendor":"silabs.com","product":"gsdk"}],"references":[{"url":"https://github.com/SiliconLabs/gecko_sdk","tags":["x_transferred","Product","package"]},{"url":"https://community.silabs.com/069Vm0000004NinIAE","tags":["x_transferred","Permissions Required","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4280","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3rwq-pxmh-pw55"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4280.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-4280","title":"Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region","description":"An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.","status":"published","published":"2024-01-02T16:52:06.959Z","modified":"2025-06-13T19:03:26.975Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-125","CWE-787"],"updated_at":"2026-11-02T14:35:30.474787Z"}],"euvd":[{"id":"EUVD-2023-54151","description":"An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.","status":"published","published":"2024-01-02T16:52:06Z","modified":"2025-06-13T19:03:26Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:32:24.065864Z"}],"ghsa":[{"id":"GHSA-3rwq-pxmh-pw55","title":"An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko...","description":"An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.","status":"published","published":"2024-01-02T18:30:20Z","modified":"2024-01-02T18:30:26Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:55:19.778382Z"}],"nvd":[{"id":"CVE-2023-4280","description":"An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.","status":"published","published":"2024-01-02T17:15:09.52Z","modified":"2026-06-17T06:37:28.12Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-125","CWE-787"],"updated_at":"2026-11-02T14:08:59.830468Z"}],"osv":[{"id":"CVE-2023-4280","title":"Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region","description":"An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.","status":"published","published":"2024-01-02T16:52:06.959Z","modified":"2026-10-28T02:31:11.958421296Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-125","CWE-787"],"updated_at":"2026-11-02T15:44:33.792101Z"}]}}