CVE-2025-14547lowCWE-191

CVE-2025-14547: falha de baixa gravidade em silabs.com Gecko SDK

ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs

Publicada em

Seguir esta CVE+ Monitorar Gecko SDK+ Monitorar Simplicity SDK

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 2.3epss 0.3%
An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Produtos afetados
silabs.com · Gecko SDKsilabs.com · Simplicity SDK
CVEs relacionadas — silabs.com Gecko SDK

No mesmo produto, das mais perigosas para as menos.

CVE-2023-51391HIGHMicrium OS Network uC-HTTP server header parsing invalid pointer dereference vulnerabilityEPSS 0.8%CVE-2023-5310MEDIUMZ-Wave Denial of Service caused by Stream of PacketsEPSS 0.3%CVE-2024-6350MEDIUMEmberZNet malformed MAC layer packet leads to denial of serviceEPSS 0.3%CVE-2025-8414CRITICALZigbee Green Power Host Buffer Overflow VulnerabilityEPSS 0.3%CVE-2024-4013MEDIUMFailure to update BT Mesh Replay Protection ListEPSS 0.3%CVE-2023-2687LOWCVE-2023-2687EPSS 0.2%