CVE-2023-3488

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-3488

Import Source

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-3488

Published

2023-07-28T16:15:12.997Z

Modified

2026-03-14T12:05:45.699042Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file.

References

Affected packages

Type

GIT

Repo

https://github.com/siliconlabs/gecko_sdk

Events

Introduced

Last affected

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.3.0"
        }
    ]
}

v4.*

v4.2.0

v4.2.1

v4.2.2

v4.2.3

v4.3.0

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-3488.json"