Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2023-4020

Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memory

Description

An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows reading/writing of memory in the secure region of memory from the non-secure region of memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

silabs.com GSDK

Default version status: unaffected

  • 1.0 to < 4.4.0affected

References