CVE-2023-41097

—

CVSS 3.1

7.5 high

EPSS

<1%p22

Published

Dec 21, 2023 (Dec 21, 2023)

Modified

Jun 17, 2026

Description

An Observable Timing Discrepancy, Covert Timing Channel vulnerability in Silabs GSDK on ARM potentially allows Padding Oracle Crypto Attack on CBC PKCS7.This issue affects GSDK: through 4.4.0.

Vendors: silabs
Products: gecko software development kit
Weakness: CWE-208, CWE-327, CWE-203
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.