Approved changes feed: RSS · Atom

cpe:2.3:a:silabs.com:simplicity_sdk:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSilabs.Com (52225443-b468-5192-880f-63993491f517)
ProductSimplicity Sdk (21480199-d80b-5ba0-b583-8dada8b8a65b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8676 vulnerable 2026-06-03 15:29:29.561014 Details available
HIGH (8.8)
An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond.
Published: 2026-05-26T19:36:53.947Z
Updated: 2026-05-26T20:47:58.785Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8414 vulnerable 2026-06-03 15:13:43.559387 Zigbee Green Power Host Buffer Overflow Vulnerability
Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerability.
Published: 2025-10-17T16:02:55.583Z
Updated: 2025-10-17T17:20:32.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7432 vulnerable 2026-06-03 15:12:31.257365 DPA countermeasures not reseeded under certain conditions
DPA countermeasures in Silicon Labs' Series 2 devices are not reseeded under certain conditions.  This may allow an attacker to eventually extract secret keys through a DPA attack.
Published: 2026-02-09T16:07:54.943Z
Updated: 2026-02-09T16:23:54.517Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14972 vulnerable 2026-06-03 14:58:56.234377 Insufficient DPA countermeasure reseeding
* Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually repeat. * KSU keys using SYMCRYPTO will be impacted by this vulnerability.
Published: 2026-05-15T14:35:09.434Z
Updated: 2026-05-15T15:40:29.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14547 vulnerable 2026-06-03 14:58:55.523387 ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs
An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.
Published: 2026-02-20T14:11:05.529Z
Updated: 2026-02-20T20:39:50.744Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12131 vulnerable 2026-06-03 14:58:43.858211 Truncated 802.15.4 packet leads to denial of service
A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service.
Published: 2026-02-05T20:02:24.790Z
Updated: 2026-02-05T20:29:04.115Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6350 vulnerable 2026-06-03 14:58:02.690518 EmberZNet malformed MAC layer packet leads to denial of service
MEDIUM (6.5)
A malformed 802.15.4 packet causes a buffer overflow to occur leading to an assert and a denial of service. A watchdog reset clears the error condition automatically.
Published: 2025-01-08T17:12:58.226Z
Updated: 2025-01-08T17:27:34.087Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.