Skip to content
Silabs vulnerabilities
Newest
-
silabs emberznet
Out-of-bounds write in Zigbee Simple_Desc_req handling
CVE-2026-85079
7.5 High
-
silabs emberznet
Out-of-bounds write in Zigbee Publish Price Matrix handling
CVE-2026-94502
7.5 High
-
silabs emberznet
Authenticated Denial-of-Service in Zigbee Publish Billing Period
CVE-2026-66282
6.0 Medium
-
silabs emberznet
Authenticated Denial-of-Service in Zigbee Discover Attributes Handling
CVE-2026-66281
6.0 Medium
-
silabs emberznet
Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling
CVE-2026-85080
6.0 Medium
-
silabs emberznet
Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2
CVE-2026-47154
7.1 High
-
silabs emberznet
Level Control Step With On/Off divide-by-zero in EmberZNet v9.0.2
CVE-2026-47153
7.1 High
-
silabs emberznet
Level Control Move divide-by-zero in EmberZNet v9.0.2
CVE-2026-47152
7.1 High
-
silabs emberznet
Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2
CVE-2026-47151
7.1 High
-
silabs emberznet
IAS Zone enroll invalid table index and write in EmberZNet 9.0.2
CVE-2026-47150
7.1 High
-
silabs emberznet
Door Lock GetUserType invalid table index in EmberZNet v9.0.2
CVE-2026-47149
7.1 High
-
silabs emberznet
Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2
CVE-2026-47148
7.1 High
-
silabs emberznet
OTA server raw parser missing per-field bounds validation in EmberZNet v9.0.2
CVE-2026-47147
7.1 High
-
silabs emberznet
Color Control color-temperature assertion abort in EmberZNet v9.0.2
CVE-2026-47146
7.1 High
-
silabs emberznet
Color Control hue/saturation assertion abort in EmberZNet v9.0.2
CVE-2026-47145
7.1 High
-
silabs emberznet
Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2
CVE-2026-4526
7.1 High
-
silabs simplicity software development kit, silabs.com emberznet sdk +1 more
Truncated 802.15.4 packet leads to denial of service
CVE-2025-12131
5.3 Medium
-
silabs gecko os
Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability
CVE-2025-2838
6.5 Medium
-
silabs gecko os
Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2025-2837
8.8 High
-
silabs gecko os
Silicon Labs Gecko OS Debug Interface Format String
CVE-2024-23937
4.3 Medium
-
silabs gecko os
Silicon Labs Gecko OS HTTP GET Request Handling Stack-based Buffer Overflow
CVE-2024-23973
8.8 High
-
silabs gecko os
Silicon Labs Gecko OS http_download Stack-based Buffer Overflow
CVE-2024-24731
7.5 High
-
silabs z-wave software development kit
Silicon Labs Z-Wave Series 500 v6.84.0 was discovered to contain insecure permissions.
CVE-2024-50931
4.6 Medium
-
silabs z-wave software development kit
An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code.
CVE-2024-50930
8.8 High
-
silabs z-wave software development kit
Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers...
CVE-2024-50929
6.2 Medium
-
silabs z-wave software development kit
Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers...
CVE-2024-50928
6.5 Medium
-
silabs z-wave software development kit
Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers...
CVE-2024-50924
6.5 Medium
-
silabs z-wave software development kit
Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers...
CVE-2024-50921
6.5 Medium
-
silabs z-wave software development kit
Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers...
CVE-2024-50920
8.8 High
-
silabs gecko os
Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2024-23938
8.8 High
-
silabs bluetooth low energy software development kit, silabs.com simplicity sdk +1 more
Loss of confidentiality due to potential race condition in Bluetooth controller Connection_Handle reuse
CVE-2023-41093
3.1 Low
-
silabs sisdk
Denial of service in multi-protocol gateway - Zigbee + Thread
CVE-2024-3017
6.5 Medium
-
silabs emberznet sdk, silabs.com ember znet sdk +1 more
Zigbee co-ordinator realignment packet may lead to denial of service
CVE-2024-3043
7.5 High
-
silabs z-wave software development kit, silicon labs z-wave sdk +1 more
Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow
CVE-2024-22472
8.1 High
-
silabs z\/ip gateway sdk, silabs.com z/ip gateway sdk +1 more
Z/IP Gateway Device Reset Locally Denial of Service Vulnerability
CVE-2024-3051
7.5 High
-
silabs gecko software development kit
Micrium OS Network uC-HTTP server header parsing invalid pointer dereference vulnerability
CVE-2023-51391
7.5 High
-
silabs z-wave software development kit, silicon labs z-wave sdk +1 more
Z-Wave S0 Decryption Vulnerability in End Devices
CVE-2023-51395
8.8 High
-
silabs.com ember znet sdk, silabs emberznet, emberznet sdk +2 more
Potential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer
CVE-2023-51393
5.3 Medium
-
silabs.com ember znet sdk, silabs emberznet, emberznet sdk +2 more
Potential DoS for EFR32xxx parts in high traffic environments due to null buffer dereference / crash
CVE-2023-51394
5.3 Medium
-
silabs emberznet, silabs.com ember znet sdk +1 more
Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM
CVE-2023-51392
6.2 Medium
-
silabs.com pc controller, silabs z-wave pc-based controller +1 more
Silicon Labs PC Controller v5.54.0 and Earlier Denial of Service Vulnerability
CVE-2023-6640
6.5 Medium
-
silabs.com pc controller, silabs z-wave pc-based controller +1 more
Silicon Labs PC Controller Denial of Service Vulnerability
CVE-2023-6533
6.5 Medium
-
silabs gecko software development kit, silabs.com gsdk +1 more
Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices
CVE-2024-22473
6.8 Medium
-
weston embedded uc-http, silabs gecko platform, gecko software development kit +2 more
A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston...
CVE-2023-45318
10.0 Critical
-
silabs gecko software development kit, silabs.com gsdk +1 more
Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients
CVE-2024-0240
6.5 Medium
-
silabs gecko software development kit, silabs.com gsdk +1 more
Zigbee Unauthenticated DoS via NWK Sequence number manipulation
CVE-2023-6874
7.5 High
-
silabs gecko software development kit, silabs.com gsdk +1 more
Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow
CVE-2023-6387
Public exploit
7.5 High
-
silabs gecko software development kit, silabs.com gsdk +1 more
Glitch detection not active by default in Silicon Labs Secure Vault High devices
CVE-2023-5138
6.8 Medium
-
silabs gecko software development kit, silabs.com gsdk +1 more
Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region
CVE-2023-4280
9.3 Critical
-
silabs.com gsdk, silabs gecko software development kit +1 more
Potential Timing vulnerability in CBC PKCS7 padding calculations
CVE-2023-41097
4.6 Medium
- Show olderLoading…