PT-2024-12919 · Silicon · Silabs Bluetooth Sdk

Published 2024-07-12 · Updated 2025-09-25 · CVE-2023-41093

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Silabs Bluetooth SDK versions through 8.0.0

Description The issue is related to a Use After Free vulnerability in the Silicon Labs Bluetooth SDK on 32-bit, ARM architectures. This vulnerability may allow an attacker with precise timing capabilities to intercept a small number of packets intended for a recipient that has left the network.

Recommendations For Silabs Bluetooth SDK versions through 8.0.0, update to a version later than 8.0.0 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2023-41093

Affected Products

Silabs Bluetooth Sdk

References · 8

• https://osv.dev/vulnerability/CVE-2023-41093 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-41093 · Security Note
• https://t.me/cveNotify/136443 · Telegram Post
• https://t.me/cvenotify/94030 · Telegram Post
• https://community.silabs.com/068Vm000007v4HP · Note
• https://t.me/cvedetector/786 · Telegram Post
• https://t.me/cvenotify/86113 · Telegram Post
• https://t.me/cvenotify/86207 · Telegram Post