911 matches found
CVE-2025-2329
CVE-2025-2329 affects Silicon Labs OpenThread RCP. In high-traffic environments, the SPI transmit buffer may not be cleared, potentially sending a corrupt SPI packet to the host and causing the host to reset the RCP, resulting in a denial of service. Connected sources confirm the issue and refere...
CVE-2025-2329 High traffic causes corrupt SPI packets in OpenThread leading to denial of service
In high traffic environments, a Silicon Labs OpenThread RCP see impacted versions fails to clear the SPI transmit buffer and may send a corrupt packet over SPI to its host, causing the host to reset the RCP which results in a denial of service...
CVE-2025-3873 Buffer overflow in Si91x crypto APIs
The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host Cortex-M4 application. slsi91xaes slsi91xgcm slsi91xccm slsi91xsha...
Silicon SiWx91x 安全漏洞
The Silicon SiWx91x is a radio board from Silicon Technology Silicon. A security vulnerability exists in the Silicon SiWx91x prior to version 3.4.0, which stems from the slsi91xaes, slsi91xgcm, slsi91xccm, and slsi91xsha APIs failing to check the size of the caller's output buffer, which could...
PT-2025-30882 · Silicon · Siwx91X
Name of the Vulnerable Software and Affected Versions: Silicon Labs SiWx91x versions prior to 3.4.0 Description: The APIs sl si91x aes, sl si91x gcm, sl si91x ccm, and sl si91x sha did not validate the size of the output buffer provided by the caller. This could result in data corruption on the...
PT-2025-30887 · Silicon · Openthread Rcp
Name of the Vulnerable Software and Affected Versions: Silicon Labs OpenThread RCP affected versions not specified Description: In high traffic environments, the RCP fails to clear the SPI transmit buffer, potentially sending a corrupt packet over SPI to its host. This can cause the host to reset...
cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
...
Vulnerability of the wfxUploadAp_templates() function in the drivers/net/wireless/silabs/wfx/sta.c module – A driver for supporting wireless connection adapters from Silicon Laboratories’ Linux-based operating systems. This vulnerability allows a hacker to cause a service failure.
Vulnerability of the wfxUploadAptemplates function in the drivers/net/wireless/silabs/wfx/sta.c module – The wireless adapter support driver from Silicon Laboratories for Linux operating systems is vulnerable due to a NULL pointer dereferencing issue. Exploiting this vulnerability could allow an...
CVE-2024-0240
A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending notifications to multiple clients, this results in all Bluetooth operations, such as advertising and scanning, to stop...
CVE-2024-3017
In a Silicon Labs multi-protocol gateway, a corrupt pointer to buffered data on a multi-protocol radio co-processor RCP causes the OpenThread Border RouterOTBR application task running on the host platform to crash, allowing an attacker to cause a temporary denial-of-service...
CVE-2024-50924
Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller and the device itself via repeatedly sending crafted packets to the controller...
CVE-2024-50920
Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets...
CVE-2024-50928
Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the wakeup interval of end devices in controller memory, disrupting the device's communications with the controller...
CVE-2024-24731
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the httpdownload command. The issue results from t...
CVE-2024-23937
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the debug interface. The issue results from the lack of proper...
CVE-2024-23973
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HTTP GET requests. The issue results from the lack of...
CVE-2024-50929
Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to arbitrarily change the device type in the controller's memory, leading to a Denial of Service DoS...
CVE-2024-50921
Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause a Denial of Service DoS via repeatedly sending crafted packets to the controller...