← Back

CVE-2023-32096

nvd nist
Published: May 18, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Compiler removal of buffer clearing in sli_crypto_transparent_aead_encrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

Affected (1)

Silabs
1 product
Gecko Software Development Kit
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Gecko Software Development Kit
Up to 4.2.1

Related CWEs

CWE-14
Compiler Removal of Code to Clear Buffers
Sensitive memory is cleared according to the source code, but compiler optimizations leave the memory untouched when it is not read from again, aka "dead store removal."

References (4)

Source: product-security@silabs.com
Permissions Required
Source: product-security@silabs.com
Product
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions Required
Source: af854a3a-2127-422b-91ae-364da2661108
Product

Timeline

No history available yet.