CVE-2023-3488
Uninitialized variable in Gecko Bootloader can leak secure stack
Résumé
Uninitialized variable in Gecko Bootloader can leak secure stack
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file.
Références
- advisory community.silabs.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com