CVE-2023-3488
Uninitialized variable in Gecko Bootloader can leak secure stack
Summary
Uninitialized variable in Gecko Bootloader can leak secure stack
Original description
The description as published by the source.
Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file.
References
- advisory community.silabs.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com