Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region

CVE-2023-4280

What is CVE-2023-4280?

An unvalidated input vulnerability in the Silicon Labs TrustZone implementation within the Gecko SDK versions v4.3.x and earlier permits attackers to gain unauthorized access to the trusted region of memory. This flaw arises from insufficient validation of inputs, potentially enabling malicious actors to exploit the system by breaching the security boundaries between trusted and untrusted memory areas. Such vulnerabilities underscore the importance of robust input validation mechanisms in safeguarding critical data and system integrity.

References