Approved changes feed: RSS · Atom
cpe:2.3:a:silabs.com:gecko_sdk:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Silabs.Com (52225443-b468-5192-880f-63993491f517) |
|---|---|
| Product | Gecko Sdk (5ae9b02d-dc92-5198-a300-ca382910594f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-8414 |
vulnerable | 2026-06-03 15:13:43.560196 |
Zigbee Green Power Host Buffer Overflow Vulnerability
Due to improper input validation, a buffer overflow vulnerability is present in
Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain
conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerability.
Published: 2025-10-17T16:02:55.583Z
Updated: 2025-10-17T17:20:32.188Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14547 |
vulnerable | 2026-06-03 14:58:55.524099 |
ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs
An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.
Published: 2026-02-20T14:11:05.529Z
Updated: 2026-02-20T20:39:50.744Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12986 |
vulnerable | 2026-06-03 14:58:45.382680 |
Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devices
When a WF200/WGM160P device is configured to operate as an Access Point, it may be vulnerable to a denial of service triggered by a malformed packet. The device may recover automatically or require a hard reset.
Published: 2025-12-04T21:55:59.291Z
Updated: 2025-12-05T15:40:13.811Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4013 |
vulnerable | 2026-06-03 14:57:14.535377 |
Failure to update BT Mesh Replay Protection List
MEDIUM (5.6)
A bug exists in the API, mesh_node_power_off(), which fails to copy the contents of the Replay Protection
List (RPL) from RAM to NVM before powering down, resulting in the ability to replay unsaved messages. Note that as of June 2024, the Gecko SDK was renamed to the Simplicity SDK, and the versioning scheme
was changed from Gecko SDK vX.Y.Z to Simplicity SDK YYYY.MM.Patch#.
Published: 2024-06-06T21:31:53.472Z
Updated: 2024-08-01T20:26:57.298Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5310 |
vulnerable | 2026-06-03 14:53:48.210871 |
Z-Wave Denial of Service caused by Stream of Packets
MEDIUM (5.7)
A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device.
Published: 2023-12-15T16:05:15.120Z
Updated: 2024-10-08T14:15:42.486Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2687 |
vulnerable | 2026-06-03 14:51:43.703580 |
Details available
LOW (2.9)
Buffer overflow in Platform CLI component in Silicon Labs Gecko SDK v4.2.1 and earlier allows user to overwrite limited structures on the heap.
Published: 2023-06-02T15:56:21.083Z
Updated: 2025-01-08T17:56:25.502Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.