CVE-2023-32098
Key duplication in GSDK
Résumé
Key duplication in GSDK
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Compiler removal of buffer clearing in
sli_se_sign_message
in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.
Références
- advisory community.silabs.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com