CVE-2024-22473
Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices
Summary
Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices
Original description
The description as published by the source.
TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices. This defect may allow Signature Spoofing by Key Recreation.This issue affects Gecko SDK through v4.4.0.
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web community.silabs.com