Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memory

CVE-2023-4020

Summary

An unvalidated input flaw in the Silicon Labs TrustZone implementation enables unauthorized reading and writing to secure memory from non-secure regions. This vulnerability can potentially allow attackers to bypass security boundaries, leading to unauthorized data manipulation or information disclosure.

References