CVE-2023-4041

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code Injection, Authentication Bypass.This issue affects "Standalone" and "Application" versions of Gecko Bootloader.

Score

CVSS 3.1 9.8 Critical

Status

Modified - product-security@silabs.com

Published

2023-08-23

Last modified

2024-10-03

Weaknesses

CWE-120, CWE-494, CWE-787, CWE-913

Affected products

• Gecko Bootloader (Silabs)
• Gecko Bootloader (Silicon Labs)

References

• https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000XT8GsQAL?operationContext=S1