CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NCVE-2023-3488
Medium (5.5) in silabs gecko software development kit. EPSS 0.3% chance of exploitation in the next 30 days.
Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
- CWE
- CWE-908
- Published
- Modified
- Record from
- the NVD, synced
Affected
- silabs:gecko_software_development_kit
References
- https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000Wi3HwQAJ?operationContext=S1
- https://github.com/SiliconLabs/gecko_sdk/releases
- https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000Wi3HwQAJ?operationContext=S1
- https://github.com/SiliconLabs/gecko_sdk/releases