Approved changes feed: RSS · Atom

cpe:2.3:a:silabs:gecko_bootloader:*:*:*:*:*:*:arm:*

part: a version: * update: *

VendorSilabs (23d6bce5-f2eb-5a47-a0ef-8e615f48c9bf)
ProductGecko Bootloader (4bce6401-e525-5443-a8bb-d7ff0dffeb1f)
Edition*
Language*
Software edition*
Target software*
Target hardwarearm
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/siliconlabs/gecko_sdk purl2cpe 2026-06-01 10:18:16.407223

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4041 vulnerable 2026-06-08 06:16:11.192719 Second Stage Gecko Bootloader GBL Parser Buffer Overrun Vulnerability
CRITICAL (9.8)
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code Injection, Authentication Bypass.This issue affects "Standalone" and "Application" versions of Gecko Bootloader.
Published: 2023-08-23T04:09:12.180Z
Updated: 2024-10-03T14:08:22.261Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.