CVE-2023-4280 — Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region

CVE-2023-4280

Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region PUBLISHED

Description (CNA)

An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.

Affected (CNA)

Vendor / product	Versions
silabs.com / GSDK	affected 1.0 through 4.3.x

CWE

CWE-125, CWE-787

References

https://github.com/SiliconLabs/gecko_sdk
https://community.silabs.com/069Vm0000004NinIAE

ADP enrichment

CVE

No English description supplied.

https://github.com/SiliconLabs/gecko_sdk
https://community.silabs.com/069Vm0000004NinIAE

CISA-ADP

No English description supplied.

No references supplied.