# cve.now: Silabs.com

The newest entries naming Silabs.com as an affected vendor (up to 200), of 99 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-16769](https://cve.now/CVE-2026-16769.md): RS9116W/SiWx917 plaintext pause encryption request causes DOS (CVSS 7.1)
- [CVE-2026-65936](https://cve.now/CVE-2026-65936.md): RS9116W/SiWx917 malformed packet with increased length field causes memory leak (CVSS 5.3)
- [CVE-2026-65935](https://cve.now/CVE-2026-65935.md): Bypassing passkey entry in legacy pairing (CVSS 7.6)
- [CVE-2026-65934](https://cve.now/CVE-2026-65934.md): BT122 plaintext pause encryption request causes DOS (CVSS 7.1)
- [CVE-2026-65933](https://cve.now/CVE-2026-65933.md): BT122 malformed packet with increased length field causes memory leak (CVSS 5.3)
- [CVE-2026-65932](https://cve.now/CVE-2026-65932.md): BT122 stops advertising (CVSS 5.3)
- [CVE-2026-19293](https://cve.now/CVE-2026-19293.md): SMP security request (CVSS 8.8)
- [CVE-2026-19292](https://cve.now/CVE-2026-19292.md): Bluetooth re-pairing with legitimate device can use lower security level (CVSS 8.8)
- [CVE-2026-19291](https://cve.now/CVE-2026-19291.md): Bluetooth re-pairing can use a lower security level than previous (CVSS 8.8)
- [CVE-2026-16101](https://cve.now/CVE-2026-16101.md): forced re-pairing with already bonded device (CVSS 8.8)
- [CVE-2026-4930](https://cve.now/CVE-2026-4930.md): DPA Countermeasures weakening on Series 3 devices (CVSS 7.1)
- [CVE-2026-8676](https://cve.now/CVE-2026-8676.md): An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and crea (CVSS 8.8)
- [CVE-2025-14972](https://cve.now/CVE-2025-14972.md): Insufficient DPA countermeasure reseeding (CVSS 4.1)
- [CVE-2025-11571](https://cve.now/CVE-2025-11571.md): Command Execution vulnerability in Simplicity Installer (CVSS 2.1)
- [CVE-2025-14055](https://cve.now/CVE-2025-14055.md): Integer underflow in Secure NCP host (CVSS 2.4)
- [CVE-2025-14547](https://cve.now/CVE-2025-14547.md): ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs (CVSS 2.3)
- [CVE-2026-0619](https://cve.now/CVE-2026-0619.md): Integer Wraparound DoS in Silicon Labs Matter Implementation (CVSS 6.0)
- [CVE-2025-11004](https://cve.now/CVE-2025-11004.md): Reflected XSS vulnerability in Simplicity Device Manager tool (CVSS 7.5)
- [CVE-2025-7432](https://cve.now/CVE-2025-7432.md): DPA countermeasures not reseeded under certain conditions (CVSS 1.0)
- [CVE-2025-12131](https://cve.now/CVE-2025-12131.md): Truncated 802.15.4 packet leads to denial of service (CVSS 5.3)
- [CVE-2025-7964](https://cve.now/CVE-2025-7964.md): Zigbee Router Denial of Service (CVSS 9.2)
- [CVE-2025-10933](https://cve.now/CVE-2025-10933.md): Silicon Labs Z-Wave Protocol Controller Integer underflow vulnerability leads to out of bounds read (CVSS 5.3)
- [CVE-2025-12986](https://cve.now/CVE-2025-12986.md): Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devices (CVSS 6.0)
- [CVE-2025-10285](https://cve.now/CVE-2025-10285.md): Simplcity Device Manager exposes NTLMv2 hash (CVSS 7.4)
- [CVE-2025-4321](https://cve.now/CVE-2025-4321.md): DoS in RS9116W-WiSeConnect L2CAP protocol due to reception of malformed packets (CVSS 7.1)
- [CVE-2025-10693](https://cve.now/CVE-2025-10693.md): Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure (CVSS 7.6)
- [CVE-2025-8414](https://cve.now/CVE-2025-8414.md): Zigbee Green Power Host Buffer Overflow Vulnerability (CVSS 9.4)
- [CVE-2025-7448](https://cve.now/CVE-2025-7448.md): Man in the middle (MitM) attack vulnerability in Wi-SUN library (CVSS 8.6)
- [CVE-2025-1394](https://cve.now/CVE-2025-1394.md): Denial of Service (DoS) vulnerabilitiey in Zigbee library (CVSS 5.9)
- [CVE-2025-1221](https://cve.now/CVE-2025-1221.md): DoS in Zigbee device due to heavy traffic (CVSS 5.9)
- [CVE-2025-2329](https://cve.now/CVE-2025-2329.md): High traffic causes corrupt SPI packets in OpenThread leading to denial of service (CVSS 5.3)
- [CVE-2025-3873](https://cve.now/CVE-2025-3873.md): Buffer overflow in Si91x crypto APIs (CVSS 6.0)
- [CVE-2025-3301](https://cve.now/CVE-2025-3301.md): DPA Countermeasures Unavailable for Certain Cryptographic Operations on Series 2 Devices (CVSS 1.0)
- [CVE-2024-6351](https://cve.now/CVE-2024-6351.md): Malformed packet leads to denial of service in NWK/APS layer (CVSS 4.3)
- [CVE-2024-9499](https://cve.now/CVE-2024-9499.md): Uncontrolled search path can lead to DLL hijacking in USBXpress Win 98SE Dev Kit installer (CVSS 8.6)
- [CVE-2024-9498](https://cve.now/CVE-2024-9498.md): Uncontrolled search path can lead to DLL hijacking in USBXpress SDK installer (CVSS 8.6)
- [CVE-2024-9497](https://cve.now/CVE-2024-9497.md): Uncontrolled search path can lead to DLL hijacking in USBXpress 4 SDK installer (CVSS 8.6)
- [CVE-2024-9496](https://cve.now/CVE-2024-9496.md): Uncontrolled search path can lead to DLL hijacking in USBXpress Dev Kit installer (CVSS 8.6)
- [CVE-2024-9495](https://cve.now/CVE-2024-9495.md): Uncontrolled search path can lead to DLL hijacking in CP210x VCP Windows installer (CVSS 8.6)
- [CVE-2024-9494](https://cve.now/CVE-2024-9494.md): Uncontrolled search path can lead to DLL hijacking in CP210 VCP Win 2k installer (CVSS 8.6)
- [CVE-2024-9493](https://cve.now/CVE-2024-9493.md): Uncontrolled search path can lead to DLL hijacking in ToolStick installer (CVSS 8.6)
- [CVE-2024-9492](https://cve.now/CVE-2024-9492.md): Uncontrolled search path can lead to DLL hijacking in Flash Programming Utility installer (CVSS 8.6)
- [CVE-2024-9491](https://cve.now/CVE-2024-9491.md): Uncontrolled search path can lead to DLL hijacking in Configuration Wizard 2 installer (CVSS 8.6)
- [CVE-2024-9490](https://cve.now/CVE-2024-9490.md): Uncontrolled search path can lead to DLL hijacking in Silicon Labs IDE installer (CVSS 8.6)
- [CVE-2024-7322](https://cve.now/CVE-2024-7322.md): Dos in ZigBee device due to unsolicited encrypted rejoin response (CVSS 5.8)
- [CVE-2024-6352](https://cve.now/CVE-2024-6352.md): Malformed packet leads to denial of service in APS layer (CVSS 4.3)
- [CVE-2024-10106](https://cve.now/CVE-2024-10106.md): Ember ZNet buffer overflow in 'packet handoff' plugin (CVSS 3.7)
- [CVE-2024-6350](https://cve.now/CVE-2024-6350.md): EmberZNet malformed MAC layer packet leads to denial of service (CVSS 6.5)
- [CVE-2024-8361](https://cve.now/CVE-2024-8361.md): DoS caused due to wrong hash length returned for SHA2/224 algorithm (CVSS 7.5)
- [CVE-2024-7139](https://cve.now/CVE-2024-7139.md): Denial of Service in Silicon Labs RS9116 Bluetooth SDK (CVSS 6.5)
- [CVE-2024-7138](https://cve.now/CVE-2024-7138.md): Denial of Service in Silicon Labs RS9116 Bluetooth SDK (CVSS 6.5)
- [CVE-2024-7137](https://cve.now/CVE-2024-7137.md): Denial of Service in Silicon Labs RS9116 Bluetooth SDK (CVSS 6.5)
- [CVE-2024-6657](https://cve.now/CVE-2024-6657.md): BLE peripheral DoS after few cycles of connect/disconnects (CVSS 6.5)
- [CVE-2024-2502](https://cve.now/CVE-2024-2502.md): Failure to update the tamper reset cause register when a tamper event occurs (CVSS 2.0)
- [CVE-2024-3017](https://cve.now/CVE-2024-3017.md): Denial of service in multi-protocol gateway - Zigbee + Thread (CVSS 6.5)
- [CVE-2024-3043](https://cve.now/CVE-2024-3043.md): Zigbee co-ordinator realignment packet may lead to denial of service (CVSS 7.5)
- [CVE-2024-4013](https://cve.now/CVE-2024-4013.md): Failure to update BT Mesh Replay Protection List (CVSS 5.6)
- [CVE-2024-3052](https://cve.now/CVE-2024-3052.md): Z/IP Gateway S2 Nonce Get Denial of Service Vulnerability (CVSS 7.5)
- [CVE-2024-3051](https://cve.now/CVE-2024-3051.md): Z/IP Gateway Device Reset Locally Denial of Service Vulnerability (CVSS 7.5)
- [CVE-2023-51391](https://cve.now/CVE-2023-51391.md): Micrium OS Network uC-HTTP server header parsing invalid pointer dereference vulnerability (CVSS 7.5)
- [CVE-2023-51393](https://cve.now/CVE-2023-51393.md): Potential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer (CVSS 5.3)
- [CVE-2023-51394](https://cve.now/CVE-2023-51394.md): Potential DoS for EFR32xxx parts in high traffic environments due to null buffer dereference / crash (CVSS 5.3)
- [CVE-2023-51392](https://cve.now/CVE-2023-51392.md): Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM (CVSS 6.2)
- [CVE-2023-6640](https://cve.now/CVE-2023-6640.md): Silicon Labs PC Controller v5.54.0 and Earlier Denial of Service Vulnerability (CVSS 6.5)
- [CVE-2023-6533](https://cve.now/CVE-2023-6533.md): Silicon Labs PC Controller Denial of Service Vulnerability (CVSS 6.5)
- [CVE-2024-22473](https://cve.now/CVE-2024-22473.md): Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices (CVSS 6.8)
- [CVE-2024-0240](https://cve.now/CVE-2024-0240.md): Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients (CVSS 6.5)
- [CVE-2023-6874](https://cve.now/CVE-2023-6874.md): Zigbee Unauthenticated DoS via NWK Sequence number manipulation (CVSS 7.5)
- [CVE-2023-6387](https://cve.now/CVE-2023-6387.md): Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow (CVSS 7.5)
- [CVE-2023-5138](https://cve.now/CVE-2023-5138.md): Glitch detection not active by default in Silicon Labs Secure Vault High devices (CVSS 6.8)
- [CVE-2023-4280](https://cve.now/CVE-2023-4280.md): Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region (CVSS 9.3)
- [CVE-2023-41097](https://cve.now/CVE-2023-41097.md): Potential Timing vulnerability in CBC PKCS7 padding calculations (CVSS 4.6)
- [CVE-2023-4020](https://cve.now/CVE-2023-4020.md): Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memory (CVSS 9.0)
- [CVE-2023-5310](https://cve.now/CVE-2023-5310.md): Z-Wave Denial of Service caused by Stream of Packets (CVSS 5.7)
- [CVE-2023-4489](https://cve.now/CVE-2023-4489.md): Z/IP Gateway Use of Uninitialized PRNG when Generating S0 Encryption Key (CVSS 6.4)
- [CVE-2023-41096](https://cve.now/CVE-2023-41096.md): Keys Stored in Plaintext on Secure Vault High for Silabs Ember ZNet devices (CVSS 6.8)
- [CVE-2023-41095](https://cve.now/CVE-2023-41095.md): Keys Stored in Plaintext on Secure Vault High for Silabs OpenThread devices (CVSS 6.8)
- [CVE-2023-3487](https://cve.now/CVE-2023-3487.md): Integer overflow in Silicon Labs Gecko Bootloader leads to unbounded memory access (CVSS 7.7)
- [CVE-2023-3024](https://cve.now/CVE-2023-3024.md): Bluetooth LE segmented 'prepare write response' packet may lead to out-of-bounds memory access (CVSS 5.9)
- [CVE-2023-3488](https://cve.now/CVE-2023-3488.md): Uninitialized variable in Gecko Bootloader can leak secure stack (CVSS 3.8)
- [CVE-2023-2747](https://cve.now/CVE-2023-2747.md): Uninitialized IV in Silicon Labs SE FW v2.0.0 through v 2.2.1 for internally stored data (CVSS 3.1)
- [CVE-2023-2683](https://cve.now/CVE-2023-2683.md): Connection update while closing connection may lead to denial-of-service (CVSS 5.3)
- [CVE-2023-2686](https://cve.now/CVE-2023-2686.md): Buffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or earlier allows connected device to write payloa (CVSS 9.8)
- [CVE-2023-2687](https://cve.now/CVE-2023-2687.md): Buffer overflow in Platform CLI component in Silicon Labs Gecko SDK v4.2.1 and earlier allows user to overwrite limited structures on the he (CVSS 2.9)
- [CVE-2023-32100](https://cve.now/CVE-2023-32100.md): Key duplication in GSDK (CVSS 5.3)
- [CVE-2023-32099](https://cve.now/CVE-2023-32099.md): Key duplication in GSDK (CVSS 5.3)
- [CVE-2023-32098](https://cve.now/CVE-2023-32098.md): Key duplication in GSDK (CVSS 5.3)
- [CVE-2023-32097](https://cve.now/CVE-2023-32097.md): Key duplication in GSDK (CVSS 3.1)
- [CVE-2023-32096](https://cve.now/CVE-2023-32096.md): Key duplication in GSDK (CVSS 3.1)
- [CVE-2023-2481](https://cve.now/CVE-2023-2481.md): Key duplication in GSDK (CVSS 5.3)
- [CVE-2023-1132](https://cve.now/CVE-2023-1132.md): Key duplication in GSDK (CVSS 5.3)
- [CVE-2023-0965](https://cve.now/CVE-2023-0965.md): Key duplication in GSDK (CVSS 3.1)
- [CVE-2023-0775](https://cve.now/CVE-2023-0775.md): Bluetooth LE Invalid prepare write request command leads to denial of service (CVSS 6.5)
- [CVE-2023-1262](https://cve.now/CVE-2023-1262.md): Missing MAC layer security in Wi-SUN Linux Border Router (CVSS 8.2)
- [CVE-2023-1261](https://cve.now/CVE-2023-1261.md): Missing MAC layer security in Wi-SUN SDK (CVSS 8.2)
- [CVE-2022-24939](https://cve.now/CVE-2022-24939.md): Malformed Zigbee packet with invalid destination address causes Assert (CVSS 5.7)
- [CVE-2022-24938](https://cve.now/CVE-2022-24938.md): Malformed Zigbee packet causes Assert in EmberZNet 7.0.1 or earlier (CVSS 6.5)
- [CVE-2022-24942](https://cve.now/CVE-2022-24942.md): Heap-based buffer overflow in MicriumOS HTTP Server allows potential remote code execution (CVSS 9.1)
- [CVE-2022-24936](https://cve.now/CVE-2022-24936.md): Gecko Standalone Bootloader vulnerability may allow bypassing application secure boot in some Series 2 devices (CVSS 8.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/silabs-com
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.