CVE-2024-22473
Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices
概要
Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices. This defect may allow Signature Spoofing by Key Recreation.This issue affects Gecko SDK through v4.4.0.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web community.silabs.com