Skip to content
OpenAdvisories
Medium · 6.8 CVE-2024-22473 EUVD-2024-20017GHSA-xhg6-78jc-3cwf

Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices

Published Feb 21, 2024 · Updated Sep 27, 2024 · Assigned by Silabs

Description

TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices. This defect may allow Signature Spoofing by Key Recreation.This issue affects Gecko SDK through v4.4.0.

Affected products

VendorProductAffectedFixed
silabs.com GSDK ≤ 4.4.0 —

References