CVEvulnerability

CVE-2023-4041

9.8 CRITICAL Published 2023-08-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-120, CWE-494, CWE-787, CWE-913

Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code Injection, Authentication Bypass.This issue affects "Standalone" and "Application" versions of Gecko Bootloader.

Affected configurations

• silabs gecko bootloader (< 4.2.4) • silabs gecko bootloader (>= 4.3.0 < 4.3.2)

Related

Weakness · CWE (4)

  • CWE-120 Buffer Copy without Checking Size of Input weakness
  • CWE-494 Download of Code Without Integrity Check weakness
  • CWE-787 Out-of-bounds Write weakness
  • CWE-913 Improper Control of Dynamically-Managed Code Resources weakness

References