CVE-2023-3488

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-908

Affected software

VendorProductVersions
silabs.comGecko Bootloader<= 4.3.0

References

Timeline

Published
Jul 28, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-348809.8cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the add_action method at lib/admin/language_admin.phpCVE-2023-34897.5The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file CVE-2023-34909.8SQL Injection in GitHub repository fossbilling/fossbilling prior to 0.5.3.CVE-2023-34918.8Unrestricted Upload of File with Dangerous Type in GitHub repository fossbilling/fossbilling prior to 0.5.3.CVE-2023-349166.1Fuge CMS v1.0 contains an Open Redirect vulnerability via /front/ProcessAct.java.CVE-2023-349176.1Fuge CMS v1.0 contains an Open Redirect vulnerability in member/RegisterAct.java.CVE-2023-34926.8The WP Shopping Pages WordPress plugin through 1.14 does not have CSRF check in some places, and is missing sanitisation as well as escapingCVE-2023-349238.1XML Signature Wrapping (XSW) in SAML-based Single Sign-on feature in TOPdesk v12.10.12 allows bad actors with credentials to authenticate wiCVE-2023-349247.5H3C Magic B1STW B1STV100R012 was discovered to contain a stack overflow via the function SetAPInfoById. This vulnerability allows attackers CVE-2023-349276.5Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password. This vulnerabiliCVE-2023-349287.5A stack overflow in the Edit_BasicSSID function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted CVE-2023-349297.5A stack overflow in the AddMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST
CVE-2023-3488: Medium severity, CVSS 5.5 | Vulnix