Silabs

Latest CVEs · RSS

• CVE-2026-15419 2026-09-10 · CVSS 7.0
  In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel
• CVE-2026-15418 2026-09-10 · CVSS 2.4
  In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145
• CVE-2026-15417 2026-09-10 · CVSS 6.9
  In the silabser.sys Windows 8 driver for CP210x devices, a local unprivileged user can use incorrect driver settings to cause a kernel crash.
• CVE-2026-16769 2026-09-08 · CVSS 7.1
  An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below.
• CVE-2026-17610 2026-08-27 · CVSS 6.0
  In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32M
• CVE-2026-5706 2026-08-27 · CVSS 8.9
  In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code executio
• CVE-2026-65936 2026-08-13 · CVSS 5.3
  A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information.  See vulnerability B-E4 in the related
• CVE-2026-65935 2026-08-13 · CVSS 7.6
  Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value.  See vulnerability B-E3 in the rel
• CVE-2026-65934 2026-08-13 · CVSS 7.1
  An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module.  See vulnerability B-E10 in the related paper below.
• CVE-2026-65933 2026-08-13 · CVSS 5.3
  A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper belo
• CVE-2026-65932 2026-08-13 · CVSS 5.3
  The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting in a denial of service. See vulnerability B-E2 in
• CVE-2026-19293 2026-08-13 · CVSS 8.8
  SMP security request (from peripheral) does not include the maximum encryption key size supported. Using a key with less than the maximum keysize makes brute-fo
• CVE-2026-19292 2026-08-13 · CVSS 8.8
  Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier. See V4 in the BLERP paper linked below.
• CVE-2026-19291 2026-08-13 · CVSS 8.8
  Bluetooth re-pairing with an existing device can use a lower security level. RS9116W and SiWx91x impacted. See V3 in the BLERP paper linked below.
• CVE-2026-16101 2026-08-13 · CVSS 8.8
  Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below
• CVE-2026-6924 2026-07-23 · CVSS 8.7
  A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same
• CVE-2026-4930 2026-06-25 · CVSS 7.1
  SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric cryptographic operations (AES encryption/decrypti
• CVE-2026-6432 2026-06-25 · CVSS 5.3
  Improper bounds validation in the ZAP command parser of EmberZNet SDK versions 8.0.0 through 9.1.1 (inclusive) and before 7.5.2 (exclusive) may result in crashe
• CVE-2026-47154 2026-06-25 · CVSS 7.1
  In EmberZNet v9.0.2 and earlier, a malformed GetProfileResponse message can trigger out-of-bounds reads while iterating interval entries and terminate the proce
• CVE-2026-47153 2026-06-25 · CVSS 7.1
  In EmberZNet v9.0.2 and earlier, a malformed Level Control Step command can terminate the process through a divide-by-zero fault. This command must come from a
• CVE-2026-47152 2026-06-25 · CVSS 7.1
  In EmberZNet v9.0.2 and earlier, a malformed Level Control Move command can terminate the process through a divide-by-zero fault. This command must come from a
• CVE-2026-47151 2026-06-25 · CVSS 7.1
  In EmberZNet v9.0.2 and earlier, malformed ClearWeekdaySchedule messages can trigger out-of-bounds writes into Door Lock schedule state. The size and location o
• CVE-2026-47150 2026-06-25 · CVSS 7.1
  In EmberZNet v9.0.2 and earlier, malformed IAS Zone enrollment messages can trigger an out-of-bounds state-table write and terminate the process. The size and l
• CVE-2026-47149 2026-06-25 · CVSS 7.1
  In EmberZNet v9.0.2 and earlier, malformed or out-of-range Door Lock user identifiers can trigger out-of-bounds table reads and terminate the process. These mes
• CVE-2026-47148 2026-06-25 · CVSS 7.1
  In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigger repeated reads past the end of the message payload and terminate the process.