CVE-2023-32100

Summary

Compiler removal of buffer clearing in

sli_se_driver_mac_compute

in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

Affected Software

Weaknesses

• CWE-14: CWE-14: Compiler Removal of Code to Clear Buffers

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/SiliconLabs/gecko_sdk
• https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000U19lGQAR?operationContext=S1

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/SiliconLabs/gecko_sdk
• https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000U19lGQAR?operationContext=S1

• ←Previous
• Next→