← CVE Intelligence

CVE-2024-22473

Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices PUBLISHED

Description (CNA)

TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices. This defect may allow Signature Spoofing by Key Recreation.This issue affects Gecko SDK through v4.4.0.

Affected (CNA)

Vendor / productVersions
silabs.com / GSDKaffected 0 through 4.4.0

CWE

CWE-1279, CWE-331

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.