647 matches found
c2-printf
C2-PRINTF is a small utility that lets you do printf-style debugging over a C2 debugger connection, for use with the Silicon Labs EFM8 and C8051F microcontrollers. Full write up available on my blog: https://jaycarlson.net/2017/07/16/printf-style-trace-messages-using-c2/ If you build the WPF...
Silicon Labs EmberZNet buffer error vulnerability
Silicon Labs EmberZNet versions 9.1.1 and earlier contain a buffer error vulnerability. This vulnerability arises from an out-of-bounds write when processing malformed GetGroupMembership messages, potentially leading to a crash...
Silicon Labs Z-Wave SDK authorization issue vulnerability
Silicon Labs Z-Wave SDK versions 8.1.1 and earlier for 700/800 series devices and 6.85.02 and earlier for 500 series devices contain an authorization issue vulnerability. This vulnerability stems from a lack of validation in the ZWAVECMDNODESEXIST handler, potentially allowing devices already on...
Silicon Labs EmberZNet resource management error vulnerability
Silicon Labs EmberZNet versions 9.1.1 and earlier contain a resource management error vulnerability. This vulnerability arises when processing a malformed Publish Billing Period command, leading to recursive function calls that fail to reach termination conditions. It affects only devices that...
Silicon Labs EmberZNet buffer error vulnerability
Silicon Labs EmberZNet versions 9.1.1 and earlier contain a buffer error vulnerability. This vulnerability arises from specially crafted Publish Price Matrix commands that lead to out-of-bounds writes, potentially enabling remote code execution...
Silicon Labs EmberZNet buffer error vulnerability
Silicon Labs EmberZNet versions 9.1.1 and earlier contain a buffer error vulnerability. This vulnerability arises from an out-of-bounds write when processing malformed SimpleDescreq responses received from network devices, potentially leading to remote code execution...
Silicon Labs EmberZNet resource management error vulnerability
Silicon Labs EmberZNet versions 9.1.1 and earlier contain a resource management error vulnerability. This vulnerability arises because malformed Discover Attributes commands can lead to loops with an unreachable exit condition; such commands must originate from devices on the network, and they...
Silicon Labs Z-Wave SDK buffer error vulnerability
Silicon Labs Z-Wave SDK versions 8.1.1 and earlier contain a buffer error vulnerability. This vulnerability arises because malformed NCP SPI commands can trigger an out-of-bounds read, potentially leading to the exposure of sensitive information...
CVE-2026-98830
A flaw was found in the Linux kernel's Silicon Labs WFx Wi-Fi driver. The driver fails to validate the length of firmware responses during Management Information Base MIB queries before copying the data into memory buffers. A compromised or malicious wireless device could supply an oversized...
CVE-2026-14366
The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91xsend in drivers/wifi/siwx91x/siwx91xwifi.c frees a network packet it does not own. In the Zephyr TX path the netpkt is owned by the L2/networking stack; the driver only borrows it to copy the frame bytes into a local netbuf. Before t...
CVE-2026-6924 Weak entropy initialization in Silicon Labs Matter SiWx917 TinyCrypt path
A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same stream of numbers. This vulnerability was discovered after the impacted repository was already deprecated...
CVE-2026-6924 Weak entropy initialization in Silicon Labs Matter SiWx917 TinyCrypt path
A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same stream of numbers. This vulnerability was discovered after the impacted repository was already deprecated...
CVE-2026-6924
CVE-2026-6924 describes a weak entropy initialization in SiWx917 TinyCrypt used by Silicon Labs Matter, causing the DRBG to seed from a predictable source. As a result, all random numbers in the Matter code may derive from the same stream, reducing unpredictability. The CVSS vector in the documen...
CVE-2026-6924 Weak entropy initialization in Silicon Labs Matter SiWx917 TinyCrypt path
A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same stream of numbers. This vulnerability was discovered after the impacted repository was already deprecated...
Silicon Labs RS9116 SDK security vulnerability
Silicon Labs RS9116 SDK is an embedded development toolkit developed by Silicon Labs Corporation for wireless connectivity modules. The Silicon Labs RS9116 SDK has a security vulnerability, which stems from the time limit of HRNG when power saving mode is enabled, resulting in predictable values...
CVE-2025-14055
An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a specially crafted packet...
CVE-2025-14547
An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service...
CVE-2025-14055
An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a specially crafted packet...
CVE-2025-14055
CVE-2025-14055 concerns an integer underflow in Silicon Labs Secure NCP host implementation that can cause a buffer overread when processing a specially crafted packet. The affected component is the Secure NCP host software; the underlying cause is an underflow leading to reading beyond the alloc...