Unvalidated Input Vulnerability in Silicon Labs TrustZone Implementation

Unvalidated Input Vulnerability in Silicon Labs TrustZone Implementation

CVE-2023-4280 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.

Learn more about our Web Application Penetration Testing UK.