CVE-2023-32097

Compiler removal of buffer clearing in slicryptotransparentaeaddecrypttag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM...

CVE-2023-32097 Key duplication in GSDK

Compiler removal of buffer clearing in slicryptotransparentaeaddecrypttag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM...

CVE-2023-32097 Key duplication in GSDK

Compiler removal of buffer clearing in slicryptotransparentaeaddecrypttag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM...

CVE-2023-32097

The CVE-2023-32097 vulnerability affects Silicon Labs Gecko Platform SDK (GSDK) up to v4.2.1, specifically the function sli_crypto_transparent_aead_decrypt_tag. A compiler optimization removed a buffer-clearing operation, which can cause key material to be duplicated in RAM. This is characterized...