2.3
Low
CVE-2025-14547 An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs…
Description
An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Simplicity SDK 2025.6 | earliest → 2025.6.2 | No fix stated |
| Gecko SDK 2.5 | earliest → 2.5.x | No fix stated |
Other CVEs of Simplicity SDK
The 8 CVEs of Simplicity SDK →
CVE-2026-4930
SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric…
7.1
High
CVE-2026-8676
An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the…
8.8
High
CVE-2025-14972
* Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually…
4.1
Medium
CVE-2025-7432
DPA countermeasures in Silicon Labs' Series 2 devices are not reseeded under certain conditions. This may allow an…
1.0
Low