CVE-2023-4280

CRITICAL

Silicon Labs TrustZone <v4.3.x - Memory Corruption

Title source: llm

Description

An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.

References (2)

Core 2

Core References

Permissions Required

https://community.silabs.com/069Vm0000004NinIAE

Product

https://github.com/SiliconLabs/gecko_sdk

Scores

CVSS v3 9.3

EPSS 0.0007

EPSS Percentile 21.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-125 CWE-787

Status published

Products (1)

silabs/gecko_software_development_kit 1.0.0 - 4.3.2

Published Jan 02, 2024

Tracked Since Feb 18, 2026