CVE-2023-32097
- EPSS 0.08%
- Veröffentlicht 18.05.2023 19:15:09
- Zuletzt bearbeitet 21.11.2024 08:02:42
Compiler removal of buffer clearing in sli_crypto_transparent_aead_decrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.
CVE-2023-32098
- EPSS 0.09%
- Veröffentlicht 18.05.2023 19:15:09
- Zuletzt bearbeitet 21.11.2024 08:02:42
Compiler removal of buffer clearing in sli_se_sign_message in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.
CVE-2023-32099
- EPSS 0.09%
- Veröffentlicht 18.05.2023 19:15:09
- Zuletzt bearbeitet 21.11.2024 08:02:42
Compiler removal of buffer clearing in sli_se_sign_hash in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.
CVE-2023-0775
- EPSS 0.03%
- Veröffentlicht 28.03.2023 17:15:12
- Zuletzt bearbeitet 21.11.2024 07:37:47
An invalid ‘prepare write request’ command can cause the Bluetooth LE stack to run out of memory and fail to be able to handle subsequent connection requests, resulting in a denial-of-service.
CVE-2022-24939
- EPSS 0.14%
- Veröffentlicht 18.11.2022 00:15:09
- Zuletzt bearbeitet 21.11.2024 06:51:25
A malformed packet containing an invalid destination address, causes a stack overflow in the Ember ZNet stack. This causes an assert which leads to a reset, immediately clearing the error.