[GHSA-6cr3-m628-79px] * Countermeasures for DPA within SYMCRYPTO engine on...

[Vendetaaaa]

Updates

• Affected products
• CVSS v3
• CVSS v4
• Description
• Summary

Comments
Identified Silicon Labs as the underlying vendor based on community links, translated the context to target the physical side-channel vector (Differential Power Analysis via physical access), assigned CWE-330 for the repeating/non-random sequences, and formatted the advisory structure.

[github-actions]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.

[helixplant]

Hi @Vendetaaaa,
Thank you for taking the time to supply this data. It seems that the package does not exist in the Packagist registry (Packagist: Silicon_Labs_SixG301xxx_Firmware_/GSDK(SYMCRYPTO_Driver_Component)). To review this advisory, the package must reside in one of the GitHub Advisory Database's supported ecosystems.

[taladrane]

hi @Vendetaaaa , thank you for your contribution! After review, we're unable to accept this submission because the affected package isn't part of an ecosystem currently supported by the GitHub Advisory Database. Our database is scoped to advisories for packages published in the supported ecosystems listed here, so we're unable to publish or curate advisories for this at this time.

We've closed this PR as out of scope, but really appreciate you taking the time to report this. If you believe the affected package is published in one of our supported ecosystems and we've misidentified it, please let us know and we'll take another look!