Gecko software development kit

This hub aggregates every CVE we track for Gecko software development kit, a product in the hardware firmware space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Gecko software development kit.

• CVE-2024-22473Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices6.8Feb 21, 2024
• CVE-2023-45318A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004. A specially crafted network packet can lead to arbitrary code execu...10.0Feb 20, 2024
• CVE-2024-0240Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients6.5Feb 15, 2024
• CVE-2023-6874Zigbee Unauthenticated DoS via NWK Sequence number manipulation7.5Feb 5, 2024
• CVE-2023-6387Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow7.5Feb 2, 2024
• CVE-2023-5138Glitch detection not active by default in Silicon Labs Secure Vault High devices6.8Jan 3, 2024
• CVE-2023-4280Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region9.3Jan 2, 2024
• CVE-2023-41097Potential Timing vulnerability in CBC PKCS7 padding calculations4.6Dec 21, 2023
• CVE-2023-4020Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memory9.0Dec 15, 2023
• CVE-2023-28391A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Specially crafted network packets can lead to code execution. An attack...9.0Nov 14, 2023
• CVE-2023-25181A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted set of network packets can lead to arbitrary code executi...9.0Nov 14, 2023
• CVE-2023-24585An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to memory corruption. An attacker can s...7.7Nov 14, 2023
• CVE-2023-28379A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attack...9.0Nov 14, 2023
• CVE-2023-27882A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. ...9.0Nov 14, 2023
• CVE-2023-31247A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An ...9.0Nov 14, 2023