CVE-2023-3487

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-3487

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-3487.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-3487

Published

2023-10-20T14:12:44.805Z

Modified

2026-07-15T01:48:52.422508926Z

Severity

7.7 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator

Summary

Integer overflow in Silicon Labs Gecko Bootloader leads to unbounded memory access

Details

An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when reading from or writing to storage slots.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3487.json",
    "cna_assigner": "Silabs",
    "cwe_ids": [
        "CWE-125",
        "CWE-787"
    ]
}

References

Affected packages

Git / github.com/siliconlabs/gecko_sdk

Affected ranges

Type

GIT

Repo

https://github.com/siliconlabs/gecko_sdk

Events

Introduced

Last affected

2ba59bf969e94a0544e73e501d876722790f7a89

Database specific

{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "extracted_events": [
        {
            "introduced": "1.0"
        },
        {
            "last_affected": "4.3.1"
        },
        {
            "introduced": "0"
        }
    ],
    "cpe": "cpe:2.3:a:silabs:gecko_bootloader:*:*:*:*:*:*:*:*"
}

Affected versions

v4.*

v4.2.0

v4.2.1

v4.2.2

v4.2.3

v4.3.0

v4.3.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-3487.json"