Skip to content
CVE PROGRAM SOURCE RECORD3.8 Low

CVE-2023-3488

Uninitialized variable in Gecko Bootloader can leak secure stack

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Silabs

Description

Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

silabs.com Gecko Bootloader

Default version status: unaffected

  • 0 to ≤ 4.3.0affected

References