Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability

A stack-based buffer overflow vulnerability allowing remote code execution has been identified in Silicon Labs Gecko OS. This issue arises from improper validation of user-supplied data lengths in HTTP request handling, leading to arbitrary code execution on the affected device. Notably, authentication is not required for exploitation.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device.

Remediation

Silicon Labs has released an update to address this vulnerability. Details can be found on the Silicon Labs Community page.