GS
Product
Gecko Software Development Kit
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 13Medium 7Low 1
Watch
Add Gecko Software Development Kit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5138 | 6.8 | Jan 3 | Glitch detection not active by default in Silicon Labs Secure Vault High devices Affected: 1.0.0 before 4.4.0 |
| CVE-2024-0240 | 6.5 | Feb 15 | Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients Affected: before 4.3.0 |
| CVE-2023-3024 | 6.5 | Sep 29 | Bluetooth LE segmented 'prepare write response' packet may lead to out-of-bounds memory access Affected: 1.0.0 before 6.0.0 |
| CVE-2023-0775 | 6.5 | Mar 28 | An invalid ‘prepare write request’ command can cause the Bluetooth LE stack to run out of memory and fail to be able to handle subsequent connection requests, resulting in a… Affected: 5.1.0; 5.1.1 |
| CVE-2022-24939 | 6.5 | Nov 18 | A malformed packet containing an invalid destination address, causes a stack overflow in the Ember ZNet stack Affected: All versions, or not specified |
| CVE-2023-3488 | 5.5 | Jul 28 | Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file Affected: through 4.3.0 |
| CVE-2023-2747 | 5.5 | Jun 15 | The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized Affected: 2.0.0 before 2.2.1 |
Showing 7