Arbitrary Code Execution Vulnerability in Silicon Labs Gecko OS

CVE-2024-23973

What is CVE-2024-23973?

A vulnerability exists in Silicon Labs Gecko OS that allows network-adjacent attackers to exploit the system by sending specially crafted HTTP GET requests. The flaw is tied to improper validation of user-supplied data length, which can lead to stack-based buffer overflows. If successfully executed, this can allow attackers to run arbitrary code within the context of the affected device, potentially compromising its functionality and security. No authentication is required, heightening the risk for systems relying on this software.

References