Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8

Export CSV
CVE-2026-4930

DPA Countermeasures weakening on Series 3 devices

SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric cryptographic operations (AES encryption/decryption and hashing). DPA Countermeasures on SYMCRYPTO can be weakened (reduced entropy) by forcing certain seed values if an attacker gains code execution capability on the impacted device. * Therefore, the keys loaded on SYMCRYPTO may be more vulnerable to extraction through DPA attacks than intended

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Silabs
Products
Simplicity Sdk
CVE-2026-8676

Bluetooth LE Bonding Downgrade via Spoofing

An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Silabs
Products
Simplicity Sdk
CVE-2025-14972

Insufficient DPA countermeasure reseeding

* Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually repeat. * KSU keys using SYMCRYPTO will be impacted by this vulnerability.

CVSS 4.0 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Silabs
Products
Simplicity Sdk
CVE-2025-14055

Integer underflow in Secure NCP host

An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a specially crafted packet.

CVSS 4.0 · 2.4 Low EPSS < 1% KEV · Not listed
Vendors
Silabs
Products
Simplicity Sdk
CVE-2025-7432

DPA countermeasures not reseeded under certain conditions

DPA countermeasures in Silicon Labs' Series 2 devices are not reseeded under certain conditions.  This may allow an attacker to eventually extract secret keys through a DPA attack.

CVSS 4.0 · 1 Low EPSS < 1% KEV · Not listed
Vendors
Silabs
Products
Simplicity Sdk
CVE-2025-14547

ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs

An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed
Vendors
Silabs
Products
Gecko Sdk Simplicity Sdk
CVE-2025-8414

Zigbee Green Power Host Buffer Overflow Vulnerability

Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerability.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Silabs
Products
Gecko Sdk Simplicity Sdk