Approved changes feed: RSS · Atom

cpe:2.3:a:silabs:gecko_software_development_kit:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSilabs (23d6bce5-f2eb-5a47-a0ef-8e615f48c9bf)
ProductGecko Software Development Kit (22ea2943-a2a2-52dd-88bc-495d43aa9b63)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/siliconlabs/gecko_sdk purl2cpe 2026-06-01 10:18:16.384628

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-22473 vulnerable 2026-06-08 06:29:35.840436 Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices
MEDIUM (6.8)
TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices. This defect may allow Signature Spoofing by Key Recreation.This issue affects Gecko SDK through v4.4.0.
Published: 2024-02-21T18:13:10.241Z
Updated: 2024-09-27T16:06:44.910Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0240 vulnerable 2026-06-08 06:22:00.090279 Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients
MEDIUM (6.5)
A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending notifications to multiple clients, this results in all Bluetooth operations, such as advertising and scanning, to stop.
Published: 2024-02-15T20:30:45.263Z
Updated: 2024-09-25T16:41:33.587Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6874 vulnerable 2026-06-08 06:21:56.114317 Zigbee Unauthenticated DoS via NWK Sequence number manipulation
HIGH (7.5)
Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number
Published: 2024-02-05T17:39:43.291Z
Updated: 2024-09-25T16:10:32.932Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6387 vulnerable 2026-06-08 06:19:47.093053 Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow
HIGH (7.5)
A potential buffer overflow exists in the Bluetooth LE HCI CPC sample application in the Gecko SDK which may result in a denial of service or remote code execution
Published: 2024-02-02T15:18:13.169Z
Updated: 2025-05-15T19:50:07.897Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5138 vulnerable 2026-06-08 06:19:42.604495 Glitch detection not active by default in Silicon Labs Secure Vault High devices
MEDIUM (6.8)
Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB, except EFR32xG21B.
Published: 2024-01-03T22:31:04.433Z
Updated: 2025-06-03T14:43:09.428Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51391 vulnerable 2026-06-08 06:16:17.428120 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4280 vulnerable 2026-06-08 06:16:11.977817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4020 vulnerable 2026-06-08 06:16:10.981842 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41097 vulnerable 2026-06-08 06:11:05.207983 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3488 vulnerable 2026-06-08 06:09:39.718888 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3024 vulnerable 2026-06-08 06:09:38.336475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32100 vulnerable 2026-06-08 06:04:44.931919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32099 vulnerable 2026-06-08 06:04:44.931548 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32098 vulnerable 2026-06-08 06:04:44.931036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32097 vulnerable 2026-06-08 06:04:44.930668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32096 vulnerable 2026-06-08 06:04:44.930206 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2747 vulnerable 2026-06-08 06:02:42.943133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2687 vulnerable 2026-06-08 06:02:42.829949 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2686 vulnerable 2026-06-08 06:02:42.828342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2481 vulnerable 2026-06-08 06:02:42.380727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1132 vulnerable 2026-06-08 05:52:33.933413 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0965 vulnerable 2026-06-08 05:52:33.547317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.