Silabs.com Gsdk vulnerabilities

• silabs gecko software development kit, silabs.com gsdk +1 more Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices CVE-2024-22473 6.8 MediumFebruary 21, 2024
• silabs gecko software development kit, silabs.com gsdk +1 more Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients CVE-2024-0240 6.5 MediumFebruary 15, 2024
• silabs gecko software development kit, silabs.com gsdk +1 more Zigbee Unauthenticated DoS via NWK Sequence number manipulation CVE-2023-6874 7.5 HighFebruary 5, 2024
• silabs gecko software development kit, silabs.com gsdk +1 more Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow CVE-2023-6387 Public exploit 7.5 HighFebruary 2, 2024
• silabs gecko software development kit, silabs.com gsdk +1 more Glitch detection not active by default in Silicon Labs Secure Vault High devices CVE-2023-5138 6.8 MediumJanuary 3, 2024
• silabs gecko software development kit, silabs.com gsdk +1 more Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region CVE-2023-4280 9.3 CriticalJanuary 2, 2024
• silabs.com gsdk, silabs gecko software development kit +1 more Potential Timing vulnerability in CBC PKCS7 padding calculations CVE-2023-41097 4.6 MediumDecember 21, 2023
• silabs gecko software development kit, silabs.com gsdk +1 more Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memory CVE-2023-4020 9.0 CriticalDecember 15, 2023
• silabs gecko bootloader, silabs.com gsdk +1 more Integer overflow in Silicon Labs Gecko Bootloader leads to unbounded memory access CVE-2023-3487 7.7 HighOctober 20, 2023
• silabs gecko software development kit, silabs.com gsdk +1 more Bluetooth LE segmented 'prepare write response' packet may lead to out-of-bounds memory access CVE-2023-3024 5.9 MediumSeptember 29, 2023
• silabs gecko software development kit, silabs.com gsdk +1 more Uninitialized IV in Silicon Labs SE FW v2.0.0 through v 2.2.1 for internally stored data CVE-2023-2747 3.1 LowJune 15, 2023
• silabs gecko software development kit, silabs.com gsdk +1 more Bluetooth LE Invalid prepare write request command leads to denial of service CVE-2023-0775 6.5 MediumMarch 28, 2023