Lucene search

SilabsCVELIST:CVE-2023-3487

HistoryOct 20, 2023 - 2:12 p.m.

CVE-2023-3487 Integer overflow in Silicon Labs Gecko Bootloader leads to unbounded memory access

2023-10-2014:12:44

CWE-787

CWE-125

Silabs

www.cve.org

cve-2023-3487

silicon labs gecko bootloader

integer overflow

memory access

storage slots

CVSS3

7.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

Percentile

9.0%

JSON

An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when reading from or writing to storage slots.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "GSDK",
    "vendor": "silabs.com",
    "versions": [
      {
        "lessThanOrEqual": "4.3.1",
        "status": "affected",
        "version": "1.0",
        "versionType": "patch"
      }
    ]
  }
]

References

community.silabs.com/s/contentdocument/0698Y00000ZmXqLQAV

github.com/SiliconLabs/gecko_sdk/releases

CVSS3

7.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

Percentile

9.0%

JSON

Related for CVELIST:CVE-2023-3487