CVE-2022-24936: Silabs Gecko Bootloader

Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Out-of-Bounds error in GBL parser in Silicon Labs Gecko Bootloader version 4.0.1 and earlier allows attacker to overwrite flash Sign key and OTA decryption key via malicious bootloader upgrade.

Affected products

• Silabs Gecko Bootloader: up to and including 4.0.1

Published 2022-11-02. Last modified 2026-06-17.