CVE-2026-6924highCWE-336

CVE-2026-6924: high-severity vulnerability in Silicon Labs Matter Github

Weak entropy initialization in Silicon Labs Matter SiWx917 TinyCrypt path

Published 23 Jul 2026 · Updated 24 Jul 2026

Follow this CVE + Monitor Silicon Labs Matter Github

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.4%

A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same stream of numbers. This vulnerability was discovered after the impacted repository was already deprecated.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Affected products

Silicon Labs · Silicon Labs Matter Github

References

https://github.com/SiliconLabs/matter/tree/release_2.3.1-1.3 https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/a45Vm0000009SzZIAU?operationContext=S1