Silicon Labs Gecko Platform Buffer Overread Vulnerability in CPC Application via SPI Interface

A buffer overread vulnerability has been identified in the CPC application of the Silicon Labs Gecko Platform. This issue occurs when the application is operating in full duplex SPI mode and receives an invalid packet over the SPI interface, leading to potential information leakage or memory corruption.

Impact

Exploitation of this vulnerability can result in a buffer overread, which may lead to information leakage or memory corruption.

Remediation

Users can upgrade to the latest version of the Silicon Labs Simplicity SDK, which includes the patched version of the Gecko Platform. The latest version can be downloaded from the Silicon Labs GitHub repository.