CVE-2023-4280: Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region
Published Jan 2, 2024
·Updated
An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.
Affected Software
1 affected component
Silabs Gecko Software Development Kit>=1.0.0<=4.3.2
Event History
Jan 2, 2024
CVE Published
04:52 PM
Data Sourced
04:52 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-4280?
CVE-2023-4280 has been classified as a high severity vulnerability due to the potential for attackers to access secure memory regions.
2
How do I fix CVE-2023-4280?
To fix CVE-2023-4280, upgrade the Silicon Labs Gecko SDK to version 4.3.3 or later.
3
What impact does CVE-2023-4280 have on affected software?
CVE-2023-4280 allows untrusted input to gain unauthorized access to the trusted memory region, potentially compromising sensitive data.
4
Which versions of Gecko SDK are affected by CVE-2023-4280?
CVE-2023-4280 affects versions of the Gecko SDK from 1.0.0 to 4.3.2.
5
Is there a workaround for CVE-2023-4280?
Currently, the recommended approach for CVE-2023-4280 is to upgrade to a non-vulnerable version rather than using a workaround.