CVE-2023-32099CWE-14

Key duplication in GSDK

Medium · published May 18, 2023

CVSS v3.1
5.3
EPSS
1%
Percentile
44.0
In the wild
Unconfirmed
What it is

Compiler removal of buffer clearing in

sli_se_sign_hash in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00530 · 44.0th percentile
Weakness
CWE-14 · Compiler Removal of Code to Clear Buffers
Published
2023-05-18T18:46Z
EPSS history
Timeline
  • 18 MAY 18:46Z
    Key duplication in GSDK
    cvelistv5