Skip to content
7.5 High

CVE-2024-8361 In SiWx91x devices, the SHA2/224 algorithm returns a hash of 256 bits instead of 224 bits

Description

In SiWx91x devices, the SHA2/224 algorithm returns a hash of 256 bits instead of 224 bits. This incorrect hash length triggers a software assertion, which subsequently causes a Denial of Service (DoS). If a watchdog is implemented, device will restart after watch dog expires. If watchdog is not implemented, device can be recovered only after a hard reset

Affected products and versions

Product Affected versions Fixed in
WiSeConnect SDK 3.3 earliest → 3.3.4 No fix stated
Track this CVE