CVE-2023-0965
Key duplication in GSDK
Summary
Key duplication in GSDK
Original description
The description as published by the source.
Compiler removal of buffer clearing in sli_cryptoacc_transparent_key_agreement in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.
References
- advisory community.silabs.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com