6.0
Medium
CVE-2025-3873 The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of…
Description
The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host (Cortex-M4) application. sl_si91x_aes sl_si91x_gcm sl_si91x_ccm sl_si91x_sha
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WiseConnect 3.0 | 3.0.0 → < 3.4.0 | 3.4.0 |
Other CVEs of WiseConnect
The 7 CVEs of WiseConnect →
CVE-2026-65936
A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive…
5.3
Medium
CVE-2026-65935
Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key…
7.6
High
CVE-2026-19293
SMP security request (from peripheral) does not include the maximum
encryption key size supported
8.8
High
CVE-2026-19292
Re-pairing with a legitimate device can use a lower security level than
previous making brute-forcing the LTK easier
8.8
High