gecko_bootloader vulnerabilities

2 known vulnerabilities in gecko_bootloader from Silabs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  GSDK: Integer Overflow or Wraparound

  CVE-2023-3487Oct 20, 2023Silabs.com

  An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when reading from or writing to storage slots.

• 9.8 Critical severity

  Gecko Bootloader: Buffer Copy without Checking Size of Input

  CVE-2023-4041Aug 23, 2023Silicon Labs

  Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code Injection, Authenticat