CVE-2023-32099

creationtimestamp| type| source ---|---|--- 2023-05-18 22:32:27+00:00| seen| https://t.me/cibsecurity/64416 2025-01-21 22:01:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2496...

CVE-2023-32099 Key duplication in GSDK

Compiler removal of buffer clearing in slisesignhash in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM...

CVE-2023-32099

In Silicon Labs Gecko Platform SDK (GSDK) the vulnerability CVE-2023-32099 arises from compiler removal of a buffer clearing in the sli_se_sign_hash function, causing key material to be duplicated in RAM. Affected products are Gecko Platform SDK versions 4.2.1 and earlier. Impact is described as ...