Silicon Labs vulnerabilities
65 CVEs and advisories name Silicon Labs as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-2837Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-9055DPA Countermeasures need reseeding
- CVE-2024-12975Silicon Labs CPC can leak information in full duplex SPI
- CVE-2024-23937Silicon Labs Gecko OS Debug Interface Format String
- CVE-2024-23973Silicon Labs Gecko OS HTTP GET Request Handling Stack-based Buffer Overflow
- CVE-2024-24731Silicon Labs Gecko OS http_download Stack-based Buffer Overflow
- CVE-2024-23938Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-41093Loss of confidentiality due to potential race condition in Bluetooth controller Connection_Handle reuse
- CVE-2024-22472Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow
- CVE-2023-51395Z-Wave S0 Decryption Vulnerability in End Devices
- CVE-2023-39541A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01.
- CVE-2023-39540A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01.
- CVE-2023-45318A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004.
- CVE-2023-24585An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01.
- CVE-2023-25181A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01.
- CVE-2023-28391A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01.
- CVE-2023-27882A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01.
- CVE-2023-28379A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01.
- CVE-2023-31247A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01.
- CVE-2023-41094Touchlink authentication bypass due to packets processed after timeout or out of range in Ember ZNet
- CVE-2023-4041Second Stage Gecko Bootloader GBL Parser Buffer Overrun Vulnerability
- CVE-2023-3110Buffer overflow in S0 Decryption on Unify Gateway
- CVE-2023-0972Buffer overflow in S0 Decryption on Z/IP Gatweay
- CVE-2023-0971Command Authentication Bypass in Z/IP Gateway
- CVE-2023-0970Serial API Buffer Overflow in Z/IP Gateway
- CVE-2023-0969Global read overflow in Z/IP Gateway
- CVE-2022-24937Malformed Zigbee packet causes Assert in EmberZNet 7.0.0 or earlier
- CVE-2018-25029The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within radio
- CVE-2013-20003Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network key of all zeros, allow
- CVE-2020-10137Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FIND_NODE_IN_RANGE frames, allow