Silicon Labs Gecko OS HTTP GET Request Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Silicon Labs Gecko OS. This issue arises from improper validation of user-supplied data lengths in HTTP GET requests, allowing network-adjacent attackers to execute arbitrary code on the affected device. No authentication is required to exploit this vulnerability.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device.

Remediation

Silicon Labs has released an update to address this vulnerability. Details about the update can be found on the Silicon Labs community page.