CVE-2023-41097
Potential Timing vulnerability in CBC PKCS7 padding calculations
Summary
Potential Timing vulnerability in CBC PKCS7 padding calculations
Original description
The description as published by the source.
An Observable Timing Discrepancy, Covert Timing Channel vulnerability in Silabs GSDK on ARM potentially allows Padding Oracle Crypto Attack on CBC PKCS7.This issue affects GSDK: through 4.4.0.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory siliconlabs.lightning.force.com
- patch github.com