Approved changes feed: RSS · Atom

cpe:2.3:a:silabs.com:gsdk:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSilabs.Com (52225443-b468-5192-880f-63993491f517)
ProductGsdk (5763d416-05a1-5c6e-8953-9e9ef282743e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-22473 vulnerable 2026-06-08 06:29:35.838813 Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices
MEDIUM (6.8)
TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices. This defect may allow Signature Spoofing by Key Recreation.This issue affects Gecko SDK through v4.4.0.
Published: 2024-02-21T18:13:10.241Z
Updated: 2024-09-27T16:06:44.910Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0240 vulnerable 2026-06-08 06:22:00.090220 Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients
MEDIUM (6.5)
A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending notifications to multiple clients, this results in all Bluetooth operations, such as advertising and scanning, to stop.
Published: 2024-02-15T20:30:45.263Z
Updated: 2024-09-25T16:41:33.587Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6874 vulnerable 2026-06-08 06:21:56.112892 Zigbee Unauthenticated DoS via NWK Sequence number manipulation
HIGH (7.5)
Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number
Published: 2024-02-05T17:39:43.291Z
Updated: 2024-09-25T16:10:32.932Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6387 vulnerable 2026-06-08 06:19:47.093019 Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow
HIGH (7.5)
A potential buffer overflow exists in the Bluetooth LE HCI CPC sample application in the Gecko SDK which may result in a denial of service or remote code execution
Published: 2024-02-02T15:18:13.169Z
Updated: 2025-05-15T19:50:07.897Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5138 vulnerable 2026-06-08 06:19:42.603259 Glitch detection not active by default in Silicon Labs Secure Vault High devices
MEDIUM (6.8)
Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB, except EFR32xG21B.
Published: 2024-01-03T22:31:04.433Z
Updated: 2025-06-03T14:43:09.428Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4280 vulnerable 2026-06-08 06:16:11.977644 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4020 vulnerable 2026-06-08 06:16:10.980241 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41097 vulnerable 2026-06-08 06:11:05.206502 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3487 vulnerable 2026-06-08 06:09:39.717462 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3024 vulnerable 2026-06-08 06:09:38.335221 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2747 vulnerable 2026-06-08 06:02:42.943080 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0775 vulnerable 2026-06-08 05:52:32.594397 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.