CVE-2023-3487CWE-125CWE-787

Integer overflow in Silicon Labs Gecko Bootloader leads to unbounded memory access

High · published October 20, 2023

CVSS v3.1
7.7
EPSS
0%
Percentile
15.6
In the wild
Unconfirmed
What it is

An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when reading from or writing to storage slots.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00251 · 15.6th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-787 · Out-of-bounds Write
Published
2023-10-20T14:12Z
EPSS history
Timeline
  • 20 OCT 14:12Z
    Integer overflow in Silicon Labs Gecko Bootloader leads to unbounded memory access
    cvelistv5