CVE-2023-4280

—

CVSS 3.1

9.8 critical

EPSS

<1%p34

Published

Jan 2, 2024 (Jan 2, 2024)

Modified

Jun 17, 2026

Description

An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.

Vendors: silabs
Products: gecko software development kit
Weakness: CWE-125, CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.