7.5
High
CVE-2024-8361 In SiWx91x devices, the SHA2/224 algorithm returns a hash of 256 bits instead of 224 bits
Description
In SiWx91x devices, the SHA2/224 algorithm returns a hash of 256 bits instead of 224 bits. This incorrect hash length triggers a software assertion, which subsequently causes a Denial of Service (DoS). If a watchdog is implemented, device will restart after watch dog expires. If watchdog is not implemented, device can be recovered only after a hard reset
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WiSeConnect SDK 3.3 | earliest → 3.3.4 | No fix stated |