Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-4041

Second Stage Gecko Bootloader GBL Parser Buffer Overrun Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Silabs

Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code Injection, Authentication Bypass.This issue affects "Standalone" and "Application" versions of Gecko Bootloader.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Silicon Labs Gecko Bootloader

Default version status: affected

  • 0 to < 4.3.1affected
  • 0 to < 4.2.4affected
  • 4.3.2unaffected
  • 4.2.4unaffected

References