silabs.com GSDK.

Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices

• silabs.com GSDK
• CWE-331
• CWE-1279

Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients

• silabs.com GSDK
• Denial of service

Zigbee Unauthenticated DoS via NWK Sequence number manipulation

• silabs.com GSDK
• Information disclosure

Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow

• silabs.com GSDK
• Memory corruption

Glitch detection not active by default in Silicon Labs Secure Vault High devices

• silabs.com GSDK
• CWE-1319

Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region

• silabs.com GSDK
• Memory corruption

Potential Timing vulnerability in CBC PKCS7 padding calculations

• silabs.com GSDK
• Weak cryptography or TLS
• CWE-208

Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memory

• silabs.com GSDK
• Memory corruption

Integer overflow in Silicon Labs Gecko Bootloader leads to unbounded memory access

• silabs.com GSDK
• Memory corruption

Bluetooth LE segmented 'prepare write response' packet may lead to out-of-bounds memory access

• silabs.com GSDK
• Memory corruption

Uninitialized IV in Silicon Labs SE FW v2.0.0 through v 2.2.1 for internally stored data

• silabs.com GSDK
• CWE-1204

Bluetooth LE Invalid prepare write request command leads to denial of service

• silabs.com GSDK
• CWE-20