CVE-2024-22473
Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices
Résumé
Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices
Description d'origine
La description telle que publiée par la source (souvent en anglais).
TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices. This defect may allow Signature Spoofing by Key Recreation.This issue affects Gecko SDK through v4.4.0.
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web community.silabs.com