CVE-2023-4280

9.8 criticalEPSS 0.4%

Critical (9.8) in silabs gecko software development kit. EPSS 0.4% chance of exploitation in the next 30 days.

An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWEs: CWE-125, CWE-787
Published: 2024-01-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

silabs:gecko_software_development_kit

References

https://community.silabs.com/069Vm0000004NinIAE
https://github.com/SiliconLabs/gecko_sdk
https://community.silabs.com/069Vm0000004NinIAE
https://github.com/SiliconLabs/gecko_sdk

Check your stack JSON