CVE-2023-4280

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-4280

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-4280.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-4280

Published

2024-01-02T16:52:06.959Z

Modified

2026-08-12T03:51:20.702600090Z

Severity

9.3 (Critical) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator

Summary

Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region

Details

An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4280.json",
    "cna_assigner": "Silabs",
    "cwe_ids": [
        "CWE-125",
        "CWE-787"
    ]
}

References

Affected packages

Git / github.com/siliconlabs/gecko_sdk

Affected ranges

Type

GIT

Repo

https://github.com/siliconlabs/gecko_sdk

Events

Introduced

Last affected

551fb8d0f659a56dcb0abde93cef7b8464bf0ac6

Database specific

Show details

{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "cpe": "cpe:2.3:a:silabs:gecko_software_development_kit:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.0"
        },
        {
            "last_affected": "4.3.x"
        },
        {
            "introduced": "1.0.0"
        },
        {
            "last_affected": "4.3.2"
        }
    ]
}

Affected versions

v4.*

v4.2.0

v4.2.1

v4.2.2

v4.2.3

v4.3.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-4280.json"