CVE-2023-32097
Key duplication in GSDK
Résumé
Key duplication in GSDK
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Compiler removal of buffer clearing in
sli_crypto_transparent_aead_decrypt_tag
in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.
Références
- advisory community.silabs.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com