Vulnerabilities

TI-2023-03255 CVE-2023-3487 · GHSA-vx25-5r7c-m73f

Integer overflow in Silicon Labs Gecko Bootloader leads to unbounded memory access

LOW 36

An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when reading from or writing to storage slots.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00251 Published 2023-10-20 No fix listed CWE-125

TI-2023-03749 CVE-2023-4041 · GHSA-hvfc-3xxp-p6hw

Second Stage Gecko Bootloader GBL Parser Buffer Overrun Vulnerability

MEDIUM 49

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser mod…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00398 Published 2023-08-23 Fixed in 4.3.1, 4.2.4 +1 CWE-120

TI-2022-08740 CVE-2022-24936 · GHSA-v3qm-xpj7-89x6

Gecko Standalone Bootloader vulnerability may allow bypassing application secure boot in some Series 2 devices

HIGH 72

Out-of-Bounds error in GBL parser in Silicon Labs Gecko Bootloader version 4.0.1 and earlier allows attacker to overwrite flash Sign key and OTA decryption key via malicious bootloader upgrade.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00934 Published 2022-11-02 No fix listed CWE-119

Vulnerabilities

Filters

Integer overflow in Silicon Labs Gecko Bootloader leads to unbounded memory access

Second Stage Gecko Bootloader GBL Parser Buffer Overrun Vulnerability

Gecko Standalone Bootloader vulnerability may allow bypassing application secure boot in some Series 2 devices