CVE-2025-12131 A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service

Description

A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service.

Affected products and versions

Product	Affected versions	Fixed in
Simplicity SDK 2025.12	earliest → < 2025.12.0	2025.12.0
EmberZNet SDK 8.0	8.0.0 → < 9.0.0	9.0.0
EmberZNet SDK 7.5	earliest → < 7.5.2	7.5.2

Other CVEs of Simplicity SDK

The 8 CVEs of Simplicity SDK →

CVE-2026-4930 SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric… 7.1 High CVE-2026-8676 An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the… 8.8 High CVE-2025-14972 * Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually… 4.1 Medium CVE-2025-14547 An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs… 2.3 Low