Silabs Gecko Software Development Kit vulnerabilities

• silabs gecko software development kit Micrium OS Network uC-HTTP server header parsing invalid pointer dereference vulnerability CVE-2023-51391 7.5 HighApril 16, 2024
• silabs gecko software development kit, silabs.com gsdk +1 more Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices CVE-2024-22473 6.8 MediumFebruary 21, 2024
• weston embedded uc-http, silabs gecko platform, gecko software development kit +2 more A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston... CVE-2023-45318 10.0 CriticalFebruary 20, 2024
• silabs gecko software development kit, silabs.com gsdk +1 more Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients CVE-2024-0240 6.5 MediumFebruary 15, 2024
• silabs gecko software development kit, silabs.com gsdk +1 more Zigbee Unauthenticated DoS via NWK Sequence number manipulation CVE-2023-6874 7.5 HighFebruary 5, 2024
• silabs gecko software development kit, silabs.com gsdk +1 more Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow CVE-2023-6387 Public exploit 7.5 HighFebruary 2, 2024
• silabs gecko software development kit, silabs.com gsdk +1 more Glitch detection not active by default in Silicon Labs Secure Vault High devices CVE-2023-5138 6.8 MediumJanuary 3, 2024
• silabs gecko software development kit, silabs.com gsdk +1 more Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region CVE-2023-4280 9.3 CriticalJanuary 2, 2024
• silabs.com gsdk, silabs gecko software development kit +1 more Potential Timing vulnerability in CBC PKCS7 padding calculations CVE-2023-41097 4.6 MediumDecember 21, 2023
• silabs gecko software development kit, silabs.com gsdk +1 more Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memory CVE-2023-4020 9.0 CriticalDecember 15, 2023
• weston embedded uc-http, silabs gecko platform, gecko software development kit +1 more +3 more A memory corruption vulnerability exists in the HTTP Server header parsing functionality of... CVE-2023-28391 9.0 CriticalNovember 14, 2023
• weston embedded uc-http, silabs gecko software development kit, silicon labs gecko platform +1 more +3 more A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston... CVE-2023-25181 9.0 CriticalNovember 14, 2023
• weston embedded uc-http, silabs gecko software development kit, silicon labs gecko platform +1 more +3 more An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded... CVE-2023-24585 7.7 HighNovember 14, 2023
• weston embedded uc-http, silabs gecko software development kit, silicon labs gecko platform +1 more +3 more A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston... CVE-2023-28379 9.0 CriticalNovember 14, 2023
• weston embedded uc-http, silabs gecko software development kit, silicon labs gecko platform +1 more +3 more A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality... CVE-2023-27882 9.0 CriticalNovember 14, 2023
• weston embedded uc-http, silabs gecko software development kit, silicon labs gecko platform +1 more +3 more A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of... CVE-2023-31247 9.0 CriticalNovember 14, 2023
• silabs gecko software development kit, silabs.com gsdk +1 more Bluetooth LE segmented 'prepare write response' packet may lead to out-of-bounds memory access CVE-2023-3024 5.9 MediumSeptember 29, 2023
• silabs.com gecko bootloader, silabs gecko software development kit +1 more Uninitialized variable in Gecko Bootloader can leak secure stack CVE-2023-3488 3.8 LowJuly 28, 2023
• silabs gecko software development kit, silabs.com gsdk +1 more Uninitialized IV in Silicon Labs SE FW v2.0.0 through v 2.2.1 for internally stored data CVE-2023-2747 3.1 LowJune 15, 2023
• silabs gecko software development kit, silabs.com gecko platform +1 more Buffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or... CVE-2023-2686 9.8 CriticalJune 15, 2023
• silabs.com gecko sdk, silabs gecko software development kit +1 more Buffer overflow in Platform CLI component in Silicon Labs Gecko SDK v4.2.1 and earlier allows... CVE-2023-2687 2.9 LowJune 2, 2023
• silabs.com gecko platform, silabs gecko software development kit +1 more Key duplication in GSDK CVE-2023-32100 5.3 MediumMay 18, 2023
• silabs.com gecko platform, silabs gecko software development kit +1 more Key duplication in GSDK CVE-2023-32099 5.3 MediumMay 18, 2023
• silabs.com gecko platform, silabs gecko software development kit +1 more Key duplication in GSDK CVE-2023-32098 5.3 MediumMay 18, 2023
• silabs.com gecko platform, silabs gecko software development kit +1 more Key duplication in GSDK CVE-2023-32097 3.1 LowMay 18, 2023
• silabs.com gecko platform, silabs gecko software development kit +1 more Key duplication in GSDK CVE-2023-32096 3.1 LowMay 18, 2023
• silabs.com gecko platform, silabs gecko software development kit +1 more Key duplication in GSDK CVE-2023-2481 5.3 MediumMay 18, 2023
• silabs.com gecko platform, silabs gecko software development kit +1 more Key duplication in GSDK CVE-2023-1132 5.3 MediumMay 18, 2023
• silabs.com gecko platform, silabs gecko software development kit +1 more Key duplication in GSDK CVE-2023-0965 3.1 LowMay 18, 2023
• silabs gecko software development kit, silabs.com gsdk +1 more Bluetooth LE Invalid prepare write request command leads to denial of service CVE-2023-0775 6.5 MediumMarch 28, 2023
• silabs.com ember znet, silabs gecko software development kit, zigbee emberznet +2 more Malformed Zigbee packet with invalid destination address causes Assert CVE-2022-24939 5.7 MediumNovember 17, 2022