CVE Vulnerabilities

CVE-2023-3488

Use of Uninitialized Resource

Published: Jul 28, 2023 | Modified: Aug 03, 2023
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file.

Weakness

The product uses or accesses a resource that has not been initialized.

Affected Software

Name Vendor Start Version End Version
Gecko_software_development_kit Silabs * 4.3.0 (including)

Potential Mitigations

References