CVE-2023-32097CWE-14

Key duplication in GSDK

Low · published May 18, 2023

CVSS v3.1
3.1
EPSS
0%
Percentile
40.5
In the wild
Unconfirmed
What it is

Compiler removal of buffer clearing in

sli_crypto_transparent_aead_decrypt_tag

in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00481 · 40.5th percentile
Weakness
CWE-14 · Compiler Removal of Code to Clear Buffers
Published
2023-05-18T18:45Z
EPSS history
Timeline
  • 18 MAY 18:45Z
    Key duplication in GSDK
    cvelistv5