CVE-2023-3487 — Integer overflow in Silicon Labs Gecko Bootloader leads to unbounded memory access

CVE-2023-3487

Integer overflow in Silicon Labs Gecko Bootloader leads to unbounded memory access PUBLISHED

Description (CNA)

An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when reading from or writing to storage slots.

Affected (CNA)

Vendor / product	Versions
silabs.com / GSDK	affected 1.0 through 4.3.1

CWE

CWE-125, CWE-787

References

https://github.com/SiliconLabs/gecko_sdk/releases
https://community.silabs.com/s/contentdocument/0698Y00000ZmXqLQAV

ADP enrichment

CVE

No English description supplied.

https://github.com/SiliconLabs/gecko_sdk/releases
https://community.silabs.com/s/contentdocument/0698Y00000ZmXqLQAV

CISA-ADP

No English description supplied.

No references supplied.