CVE-2023-32099
Compiler removal of buffer clearing in sli_se_sign_hash in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.3
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS probability
- 0.11%
- CWE
- CWE-14
- Published
- 2023-05-18
- Last modified
- 2026-03-13
Affected products
- silabs.com Gecko Platform
Weakness type
Related vulnerabilities
- CVE-2026-48984 — pam_usb: xfree() does not call explicit_bzero — sensitive cryptographic material may linger in freed heap
- CVE-2025-64646 — Multiple Vulnerabilities in IBM Concert Software
- CVE-2023-32100 — Key duplication in GSDK
- CVE-2023-32098 — Key duplication in GSDK
- CVE-2023-32097 — Key duplication in GSDK
- CVE-2023-32096 — Key duplication in GSDK
- CVE-2023-2481 — Key duplication in GSDK
- CVE-2023-1132 — Key duplication in GSDK