8.8
High
CVE-2026-8676 An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the…
Description
An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Simplicity SDK 2024.12 | earliest → < 2024.12.0 | 2024.12.0 |
Other CVEs of Simplicity SDK
The 8 CVEs of Simplicity SDK →
CVE-2026-4930
SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric…
7.1
High
CVE-2025-14972
* Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually…
4.1
Medium
CVE-2025-14547
An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs…
2.3
Low
CVE-2025-7432
DPA countermeasures in Silicon Labs' Series 2 devices are not reseeded under certain conditions. This may allow an…
1.0
Low