CVE-2024-22473

<= 4.4.0

TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices. This defect

6.8MEDIUM

CVE-2023-45318

all versions

A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004.

10.0CRITICAL

CVE-2024-0240

< 4.3.0

A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending notifications

6.5MEDIUM

CVE-2023-6874

< 4.4.0

Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number

7.5HIGH

CVE-2023-6387

< 4.4.0

A potential buffer overflow exists in the Bluetooth LE HCI CPC sample application in the Gecko SDK which may result in a denial of

7.5HIGH

CVE-2023-5138

>= 1.0.0 and < 4.4.0

Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB, except EFR32

6.8MEDIUM

CVE-2023-4280

>= 1.0.0 and <= 4.3.2

An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access

9.3CRITICAL

CVE-2023-41097

<= 4.4.0

An Observable Timing Discrepancy, Covert Timing Channel vulnerability in Silabs GSDK on ARM potentially allows Padding Oracle Cryp

4.6MEDIUM

CVE-2023-4020

>= 1.0.0 and < 4.4.0

An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs Trus

9.0CRITICAL

CVE-2023-31247

all versions

A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01.

9.0CRITICAL

CVE-2023-28391

all versions

A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Spec

9.0CRITICAL

CVE-2023-28379

all versions

A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A spe

9.0CRITICAL

CVE-2023-27882

all versions

A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.

9.0CRITICAL

CVE-2023-25181

all versions

A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A speciall

9.0CRITICAL

CVE-2023-24585

all versions

An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially craf

7.7HIGH

CVE-2023-3024

>= 1.0.0 and < 6.0.0

Forcing the Bluetooth LE stack to segment 'prepare write response' packets can lead to an out-of-bounds memory access.

5.9MEDIUM

CVE-2023-3488

<= 4.3.0

Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malf

3.8LOW

CVE-2023-2747

>= 2.0.0 and < 2.2.1

The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized.

3.1LOW

CVE-2023-2686

<= 4.2.3

Buffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or earlier allows connected device to wr

9.8CRITICAL

CVE-2023-2687

<= 4.2.1

Buffer overflow in Platform CLI component in Silicon Labs Gecko SDK v4.2.1 and earlier allows user to overwrite limited structures

2.9LOW

CVE-2023-32100

<= 4.2.1

Compiler removal of buffer clearing in sli_se_driver_mac_compute in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results

5.3MEDIUM

CVE-2023-32099

<= 4.2.1

Compiler removal of buffer clearing in sli_se_sign_hash in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in

5.3MEDIUM

CVE-2023-32098

<= 4.2.1

Compiler removal of buffer clearing in sli_se_sign_message in Silicon Labs Gecko Platform SDK v4.2.1 and earlier resu

5.3MEDIUM

CVE-2023-32097

<= 4.2.1

Compiler removal of buffer clearing in sli_crypto_transparent_aead_decrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1

3.1LOW

CVE-2023-32096

<= 4.2.1

Compiler removal of buffer clearing in sli_crypto_transparent_aead_encrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1

3.1LOW

CVE-2023-2481

<= 4.2.1

Compiler removal of buffer clearing in sli_se_opaque_import_key in Silicon Labs Gecko Platform SDK v4.2.1 and earlier resul

5.3MEDIUM

CVE-2023-1132

<= 4.2.1

Compiler removal of buffer clearing in sli_se_driver_key_agreement in Silicon Labs Gecko Platform SDK v4.2.1 and earlier resul

5.3MEDIUM

CVE-2023-0965

<= 4.2.1

Compiler removal of buffer clearing in sli_cryptoacc_transparent_key_agreement in Silicon Labs Gecko Platform SDK v4.2.1 and earli

3.1LOW

CVE-2023-0775

all versions

An invalid ‘prepare write request’ command can cause the Bluetooth LE stack to run out of memory and fail to be able to handle

6.5MEDIUM

CVE-2022-24939

all versions

A malformed packet containing an invalid destination address, causes a stack overflow in the Ember ZNet stack. This causes an asse

5.7MEDIUM