Description
Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| silabs.com | Gecko Bootloader | ≤ 4.3.0 | — |
Low · 3.8
CVE-2023-3488
EUVD-2023-44147GHSA-p3wg-g3gr-3fxj
Uninitialized variable in Gecko Bootloader can leak secure stack
Published Jul 28, 2023 · Updated Oct 11, 2024 · Assigned by Silabs