CVE-2023-32097

Compiler removal of buffer clearing in sli_crypto_transparent_aead_decrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

Scoring

Severity

LOW

CVSS base score

3.1

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS probability

0.10%

CWE

CWE-14

Published

2023-05-18

Last modified

2026-03-13

Affected products

• silabs.com Gecko Platform

Weakness type

• CWE-14

Related vulnerabilities

• CVE-2026-48984 — pam_usb: xfree() does not call explicit_bzero — sensitive cryptographic material may linger in freed heap
• CVE-2025-64646 — Multiple Vulnerabilities in IBM Concert Software
• CVE-2023-32100 — Key duplication in GSDK
• CVE-2023-32099 — Key duplication in GSDK
• CVE-2023-32098 — Key duplication in GSDK
• CVE-2023-32096 — Key duplication in GSDK
• CVE-2023-2481 — Key duplication in GSDK
• CVE-2023-1132 — Key duplication in GSDK

Markdown version · Browse all CVEs