CVE-2023-41097: Silabs Gecko Software Development Kit

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An Observable Timing Discrepancy, Covert Timing Channel vulnerability in Silabs GSDK on ARM potentially allows Padding Oracle Crypto Attack on CBC PKCS7.This issue affects GSDK: through 4.4.0.

Affected products

• Silabs Gecko Software Development Kit: up to and including 4.4.0

Published 2023-12-21. Last modified 2026-06-17.