Silicon Labs vulnerabilities

Products

• Gecko Platform 19
• Emberznet 17
• 700 Series 8
• Gecko Os 6
• 500 Series 4
• Ember Znet 4
• Z/ip Gateway 4
• Z-wave Sdk 4
• Silabser.sys Driver 3
• Simplicity Sdk 3
• Sisdk 2
• Uzb-7 2
• Z-wave 2

Newest

• silicon labs wf200 fw Malformed Wi-Fi Beacon Causes Crash on WF200 CVE-2026-107359 7.1 HighNovember 5, 2026
• silicon labs z-wave sdk Out-of-bounds read in Z-Wave NCP SPI Handler CVE-2026-89410 5.1 MediumOctober 22, 2026
• silicon labs z-wave sdk Unvalidated ZWAVE_CMD_NODES_EXIST May Cause Deletion of End Nodes​ CVE-2026-89409 5.3 MediumOctober 22, 2026
• silabs emberznet Out-of-bounds write in Zigbee Simple_Desc_req handling CVE-2026-85079 7.5 HighOctober 22, 2026
• silabs emberznet Out-of-bounds write in Zigbee Publish Price Matrix handling CVE-2026-94502 7.5 HighOctober 22, 2026
• silabs emberznet Authenticated Denial-of-Service in Zigbee Publish Billing Period CVE-2026-66282 6.0 MediumOctober 22, 2026
• silabs emberznet Authenticated Denial-of-Service in Zigbee Discover Attributes Handling CVE-2026-66281 6.0 MediumOctober 22, 2026
• silabs emberznet Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling CVE-2026-85080 6.0 MediumOctober 22, 2026
• silicon labs connect sdk Dis-connect vulnerability in Connect Stack CVE-2026-66279 7.2 HighOctober 22, 2026
• red lion controls 700 series Red Lion Controls N-Tron 700 Series Authentication Bypass Using an Alternate Path or Channel CVE-2026-33272 6.8 MediumOctober 9, 2026
• red lion controls 700 series Red Lion Controls N-Tron 700 Series Reachable Assertion CVE-2026-39453 8.5 HighOctober 9, 2026
• red lion controls 700 series Red Lion Controls N-Tron 700 Series Download of Code Without Integrity Check CVE-2026-29797 8.4 HighOctober 9, 2026
• red lion controls 700 series Red Lion Controls N-Tron 700 Series Missing Authentication for Critical Function CVE-2026-33367 9.3 CriticalOctober 9, 2026
• red lion controls 700 series Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Format CVE-2026-28745 9.3 CriticalOctober 9, 2026
• red lion controls 700 series Red Lion Controls N-Tron 700 Series Insufficiently Protected Credentials CVE-2026-39460 9.3 CriticalOctober 9, 2026
• red lion controls 700 series Red Lion Controls N-Tron 700 Series Use of Hard-Coded Credentials CVE-2026-32645 9.2 CriticalOctober 9, 2026
• silicon labs silabser.sys driver CP210x Driver Memory Corruption results in Arbitrary Code Execution CVE-2026-15419 7.0 HighSeptember 10, 2026
• silicon labs silabser.sys driver CP210x Memory Leakage CVE-2026-15418 2.4 LowSeptember 10, 2026
• silicon labs silabser.sys driver CP210x Denial of Service CVE-2026-15417 6.9 MediumSeptember 10, 2026
• silabs.com sisdk RAIL 802.15.4 Mux missing ACK can lead to DoS CVE-2026-17610 6.0 MediumAugust 27, 2026
• silicon labs bt mesh sdk Buffer overflow in Bluetooth Mesh SDK when handling extended advertisements CVE-2026-5706 8.9 HighAugust 27, 2026
• silicon labs matter github Weak entropy initialization in Silicon Labs Matter SiWx917 TinyCrypt path CVE-2026-6924 8.7 HighJuly 23, 2026
• silabs.com emberznet Improper bounds validation in EmberZNet SDK CVE-2026-6432 5.3 MediumJune 25, 2026
• silabs emberznet Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2 CVE-2026-47154 7.1 HighJune 25, 2026
• silabs emberznet Level Control Step With On/Off divide-by-zero in EmberZNet v9.0.2 CVE-2026-47153 7.1 HighJune 25, 2026
• silabs emberznet Level Control Move divide-by-zero in EmberZNet v9.0.2 CVE-2026-47152 7.1 HighJune 25, 2026
• silabs emberznet Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2 CVE-2026-47151 7.1 HighJune 25, 2026
• silabs emberznet IAS Zone enroll invalid table index and write in EmberZNet 9.0.2 CVE-2026-47150 7.1 HighJune 25, 2026
• silabs emberznet Door Lock GetUserType invalid table index in EmberZNet v9.0.2 CVE-2026-47149 7.1 HighJune 25, 2026
• silabs emberznet Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2 CVE-2026-47148 7.1 HighJune 25, 2026
• silabs emberznet OTA server raw parser missing per-field bounds validation in EmberZNet v9.0.2 CVE-2026-47147 7.1 HighJune 25, 2026
• silabs emberznet Color Control color-temperature assertion abort in EmberZNet v9.0.2 CVE-2026-47146 7.1 HighJune 25, 2026
• silabs emberznet Color Control hue/saturation assertion abort in EmberZNet v9.0.2 CVE-2026-47145 7.1 HighJune 25, 2026
• silabs emberznet Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2 CVE-2026-4526 7.1 HighJune 25, 2026
• silabs.com sisdk Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keys CVE-2026-2815 8.4 HighJune 25, 2026
• silicon labs rs9116 sdk Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values CVE-2026-3290 7.4 HighMay 14, 2026
• silabs gecko os Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability CVE-2025-2838 6.5 MediumMarch 26, 2025
• silabs gecko os Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-2837 8.8 HighMarch 26, 2025
• silabs.com simplicity sdk DPA Countermeasures need reseeding CVE-2024-9055 4.2 MediumMarch 17, 2025
• silabs.com simplicity sdk Silicon Labs CPC can leak information in full duplex SPI CVE-2024-12975 1.0 LowMarch 7, 2025
• silabs gecko os Silicon Labs Gecko OS Debug Interface Format String CVE-2024-23937 4.3 MediumJanuary 31, 2025
• silabs gecko os Silicon Labs Gecko OS HTTP GET Request Handling Stack-based Buffer Overflow CVE-2024-23973 8.8 HighJanuary 30, 2025
• silabs gecko os Silicon Labs Gecko OS http_download Stack-based Buffer Overflow CVE-2024-24731 7.5 HighJanuary 30, 2025
• silabs gecko os Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution Vulnerability CVE-2024-23938 8.8 HighSeptember 28, 2024
• silabs bluetooth low energy software development kit, silabs.com simplicity sdk +1 more Loss of confidentiality due to potential race condition in Bluetooth controller Connection_Handle reuse CVE-2023-41093 3.1 LowJuly 12, 2024
• silabs z-wave software development kit, silicon labs z-wave sdk +1 more Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow CVE-2024-22472 8.1 HighMay 7, 2024
• silabs z-wave software development kit, silicon labs z-wave sdk +1 more Z-Wave S0 Decryption Vulnerability in End Devices CVE-2023-51395 8.8 HighMarch 7, 2024
• weston embedded uc-tcp-ip, silicon labs gecko platform +1 more A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston... CVE-2023-39541 5.9 MediumFebruary 20, 2024
• weston embedded uc-tcp-ip, silicon labs gecko platform +1 more A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston... CVE-2023-39540 5.9 MediumFebruary 20, 2024
• weston embedded uc-http, silabs gecko platform, gecko software development kit +2 more A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston... CVE-2023-45318 10.0 CriticalFebruary 20, 2024
• Show olderLoading…