CVE-2024-0240

MEDIUM

Silabs Gecko Software Development Kit < 4.3.0 - Memory Leak

Title source: rule

Description

A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending notifications to multiple clients, this results in all Bluetooth operations, such as advertising and scanning, to stop.

References (2)

[Permissions Required] https://community.silabs.com/069Vm000001AjEfIAK

[Product] https://github.com/SiliconLabs/gecko_sdk

Scores

CVSS v3 6.5

EPSS 0.0003

EPSS Percentile 9.1%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-401

Status published

Affected Products (1)

silabs/gecko_software_development_kit < 4.3.0

Timeline

Published Feb 15, 2024

Tracked Since Feb 18, 2026