CVE-2023-4280: Silabs Gecko Software Development Kit

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.

Affected products

• Silabs Gecko Software Development Kit: from 1.0.0, up to and including 4.3.2

Published 2024-01-02. Last modified 2026-06-17.