Gecko Sdk CVEs and Security Vulnerabilities

CVE-2025-14547

ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs

An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed

Vendors

Silabs

Products

Gecko Sdk Simplicity Sdk

CVE-2025-8414

Zigbee Green Power Host Buffer Overflow Vulnerability

Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerability.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed