Silabs Gecko Bootloader — known CVE vulnerabilities

Every CVE whose affected-product data names Silabs Gecko Bootloader, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-4041 — CVSS 9.8 (critical): Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check…
• CVE-2022-24936 — CVSS 8.3 (high): Out-of-Bounds error in GBL parser in Silicon Labs Gecko Bootloader version 4.0.1 and earlier allows attacker to overwrite flash Sign key…
• CVE-2023-3487 — CVSS 7.7 (high): An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when reading from or writing…