CVE-2023-32096

HIGH Year: 2023
CVSS v3 Score
7.5
High
Weakness Type
CWE-14
View all →

Vulnerability Description

Compiler removal of buffer clearing in sli_crypto_transparent_aead_encrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

Related Vulnerabilities

CVE-2023-0965

HIGH
CVSS:7.5(High)

Compiler removal of buffer clearing in sli_cryptoacc_transparent_key_agreement in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

CWE-142023

CVE-2023-1132

HIGH
CVSS:7.5(High)

Compiler removal of buffer clearing in sli_se_driver_key_agreement in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

CWE-142023

CVE-2023-2481

HIGH
CVSS:7.5(High)

Compiler removal of buffer clearing in sli_se_opaque_import_key in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

CWE-142023

CVE-2023-32097

HIGH
CVSS:7.5(High)

Compiler removal of buffer clearing in sli_crypto_transparent_aead_decrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

CWE-142023

CVE-2023-32098

HIGH
CVSS:7.5(High)

Compiler removal of buffer clearing in sli_se_sign_message in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

CWE-142023

CVE-2023-32099

HIGH
CVSS:7.5(High)

Compiler removal of buffer clearing in sli_se_sign_hash in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

CWE-142023