title: Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region
description: An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.
problem types: CWE-20 Improper Input Validation
affected:
{
defaultStatus: unaffected
product: GSDK
vendor: silabs.com
versions:
lessThanOrEqual: 4.3.x, status: affected, version: 1.0, versionType: patch
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 9.3
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL