Silicon Labs vulnerabilities
65 CVEs and advisories name Silicon Labs as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-107359Malformed Wi-Fi Beacon Causes Crash on WF200
- CVE-2026-89410Out-of-bounds read in Z-Wave NCP SPI Handler
- CVE-2026-89409Unvalidated ZWAVE_CMD_NODES_EXIST May Cause Deletion of End Nodes
- CVE-2026-85079Out-of-bounds write in Zigbee Simple_Desc_req handling
- CVE-2026-94502Out-of-bounds write in Zigbee Publish Price Matrix handling
- CVE-2026-66282Authenticated Denial-of-Service in Zigbee Publish Billing Period
- CVE-2026-66281Authenticated Denial-of-Service in Zigbee Discover Attributes Handling
- CVE-2026-85080Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling
- CVE-2026-66279Dis-connect vulnerability in Connect Stack
- CVE-2026-15419CP210x Driver Memory Corruption results in Arbitrary Code Execution
- CVE-2026-15418CP210x Memory Leakage
- CVE-2026-15417CP210x Denial of Service
- CVE-2026-17610RAIL 802.15.4 Mux missing ACK can lead to DoS
- CVE-2026-5706Buffer overflow in Bluetooth Mesh SDK when handling extended advertisements
- CVE-2026-6924Weak entropy initialization in Silicon Labs Matter SiWx917 TinyCrypt path
- CVE-2026-6432Improper bounds validation in EmberZNet SDK
- CVE-2026-47154Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2
- CVE-2026-47153Level Control Step With On/Off divide-by-zero in EmberZNet v9.0.2
- CVE-2026-47152Level Control Move divide-by-zero in EmberZNet v9.0.2
- CVE-2026-47151Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2
- CVE-2026-47150IAS Zone enroll invalid table index and write in EmberZNet 9.0.2
- CVE-2026-47149Door Lock GetUserType invalid table index in EmberZNet v9.0.2
- CVE-2026-47148Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2
- CVE-2026-47147OTA server raw parser missing per-field bounds validation in EmberZNet v9.0.2
- CVE-2026-47146Color Control color-temperature assertion abort in EmberZNet v9.0.2
- CVE-2026-47145Color Control hue/saturation assertion abort in EmberZNet v9.0.2
- CVE-2026-4526Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2
- CVE-2026-2815Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keys
- CVE-2026-3290Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values
- CVE-2025-2838Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability