Code injection

Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file...

CVE-2023-3488 Uninitialized variable in Gecko Bootloader can leak secure stack

Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file...

CVE-2023-3488 Uninitialized variable in Gecko Bootloader can leak secure stack

Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file...

PT-2023-25045 · Silicon · Silicon Labs Gsdk

Name of the Vulnerable Software and Affected Versions: Silicon Labs GSDK versions 4.3.0 and earlier Description: The issue is related to an uninitialized buffer in the GBL parser, which allows an attacker to leak data from the Secure stack by using a malformed GBL file. Recommendations: For Silic...