silabs.com GSDK vulnerabilities

CVEs per yearBy the year they were published

1. 20236
2. 20246

Newest CVEs

• CVE-2024-22473

  Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices

  silabs.com · GSDK

  Medium6.8
• CVE-2024-0240

  Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients

  silabs.com · GSDK

  Medium6.5
• CVE-2023-6874

  Zigbee Unauthenticated DoS via NWK Sequence number manipulation

  silabs.com · GSDK

  High7.5
• CVE-2023-6387

  Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow

  silabs.com · GSDK

  High7.5
• CVE-2023-5138

  Glitch detection not active by default in Silicon Labs Secure Vault High devices

  silabs.com · GSDK

  Medium6.8
• CVE-2023-4280

  Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region

  silabs.com · GSDK

  Critical9.3
• CVE-2023-41097

  Potential Timing vulnerability in CBC PKCS7 padding calculations

  silabs.com · GSDK

  Medium4.6
• CVE-2023-4020

  Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memory

  silabs.com · GSDK

  Critical9.0
• CVE-2023-3487

  Integer overflow in Silicon Labs Gecko Bootloader leads to unbounded memory access

  silabs.com · GSDK

  High7.7
• CVE-2023-3024

  Bluetooth LE segmented 'prepare write response' packet may lead to out-of-bounds memory access

  silabs.com · GSDK

  Medium5.9