CVE-2023-32100CWE-14

Key duplication in GSDK

Medium · published May 18, 2023

CVSS v3.1
5.3
EPSS
0%
Percentile
39.9
In the wild
Unconfirmed
What it is

Compiler removal of buffer clearing in

sli_se_driver_mac_compute

in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00484 · 39.9th percentile
Weakness
CWE-14 · Compiler Removal of Code to Clear Buffers
Published
2023-05-18T18:47Z
EPSS history
Timeline
  • 18 MAY 18:47Z
    Key duplication in GSDK
    cvelistv5