CVE-2023-24585: Silabs Gecko Software Development Kit

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.

Affected products

• Silabs Gecko Software Development Kit: version 4.3.1 only
• Weston-Embedded Cesium Net: version 3.07.01 only
• Weston-Embedded Uc-HTTP: version 3.01.01 only

Published 2023-11-14. Last modified 2026-06-17.