Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

GSDK — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in GSDK, with AI-generated Chinese analysis, references, and POCs.

This page catalogs known vulnerabilities within the GSDK software product, focusing on common weakness types and associated security tags identified by the vendor and external researchers. The collection includes a comprehensive range of security flaws affecting the GSDK library, such as buffer overflows, injection flaws, and improper access controls, covering incidents reported from 2018 through 2023. Users can leverage this resource to track official advisories issued by the GSDK vendor, gain a deeper understanding of specific weakness classes and their potential impact on system integrity, or conduct a thorough review of the product’s historical vulnerability landscape to assess risk exposure and prioritize remediation efforts.

Vendor: silabs.com

CVE ID Title CVSS Severity Published
CVE-2024-22473 Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices CWE-1279 6.8 Medium 2024-02-21
CVE-2024-0240 Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients CWE-401 6.5 Medium 2024-02-15
CVE-2023-6874 Zigbee Unauthenticated DoS via NWK Sequence number manipulation CWE-312 7.5 High 2024-02-05
CVE-2023-6387 Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow CWE-787 7.5 High 2024-02-02
CVE-2023-5138 Glitch detection not active by default in Silicon Labs Secure Vault High devices CWE-1319 6.8 Medium 2024-01-03
CVE-2023-4280 Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region CWE-125 9.3 Critical 2024-01-02
CVE-2023-41097 Potential Timing vulnerability in CBC PKCS7 padding calculations CWE-208 4.6 Medium 2023-12-21
CVE-2023-4020 Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memory CWE-125 9.0 Critical 2023-12-15
CVE-2023-3487 Integer overflow in Silicon Labs Gecko Bootloader leads to unbounded memory access CWE-125 7.7 High 2023-10-20
CVE-2023-3024 Bluetooth LE segmented 'prepare write response' packet may lead to out-of-bounds memory access CWE-787 5.9 Medium 2023-09-29
CVE-2023-2747 Uninitialized IV in Silicon Labs SE FW v2.0.0 through v 2.2.1 for internally stored data CWE-1204 3.1 Low 2023-06-15
CVE-2023-0775 Bluetooth LE Invalid prepare write request command leads to denial of service CWE-20 6.5 Medium 2023-03-28

All 12 known CVE vulnerabilities affecting GSDK with full Chinese analysis, references, and POCs where available.