4 results (0.003 seconds)

CVSS: 4.2EPSS: 0%CPEs: 1EXPL: 0

17 Mar 2025 — The DPA countermeasures on Silicon Labs' Series 2 devices are not reseeded periodically as they should be. This may allow an attacker to eventually extract secret keys through a DPA attack. • https://community.silabs.com/069Vm00000LJMlfIAH • CWE-331: Insufficient Entropy •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

07 Mar 2025 — A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface. • https://community.silabs.com/069Vm00000LWXMeIAP • CWE-125: Out-of-bounds Read CWE-129: Improper Validation of Array Index •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

08 Jan 2025 — A malformed 802.15.4 packet causes a buffer overflow to occur leading to an assert and a denial of service. A watchdog reset clears the error condition automatically. • https://community.silabs.com/069Vm00000HtvDgIAJ • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •

CVSS: 3.1EPSS: 0%CPEs: 1EXPL: 0

12 Jul 2024 — Use After Free vulnerability in Silicon Labs Bluetooth SDK on 32 bit, ARM may allow an attacker with precise timing capabilities to intercept a small number of packets intended for a recipient that has left the network.This issue affects Silabs Bluetooth SDK: through 8.0.0. Vulnerabilidad de Use After Free en el SDK Bluetooth de Silicon Labs en 32 bits, ARM puede permitir que un atacante con capacidades de sincronización precisa intercepte una pequeña cantidad de paquetes destinados a un destinatario que ha... • https://community.silabs.com/068Vm000007v4HP • CWE-416: Use After Free •