2.3
Faible
CVE-2025-14547 An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs…
Description
An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Simplicity SDK 2025.6 | premières → 2025.6.2 | Pas de correctif indiqué |
| Gecko SDK 2.5 | premières → 2.5.x | Pas de correctif indiqué |
Autres CVE de Simplicity SDK
Les 8 CVE de Simplicity SDK →
CVE-2026-4930
SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric…
7.1
Élevée
CVE-2026-8676
An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the…
8.8
Élevée
CVE-2025-14972
* Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually…
4.1
Moyenne
CVE-2025-7432
DPA countermeasures in Silicon Labs' Series 2 devices are not reseeded under certain conditions. This may allow an…
1.0
Faible