CVE-2023-0965
Key duplication in GSDK
Résumé
Key duplication in GSDK
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Compiler removal of buffer clearing in sli_cryptoacc_transparent_key_agreement in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.
Références
- advisory community.silabs.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com