CVE Daily

CVE-2023-4280

An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earl...

Critical CVSS 9.3

Overview

An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.

CWE: CWE-125 Published: 2024-01-02T17:15:09.520
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.3 (CRITICAL)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags