What’s Vulnerable › Products
silabs.com Gecko Platform vulnerabilities
35 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.
Check whether your silabs.com Gecko Platform version is affected
Latest silabs.com Gecko Platform vulnerabilities
- CVE-2025-14547 — ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs (CVSS 2.3)
- CVE-2025-12986 — Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devices (CVSS 6.0)
- CVE-2025-8414 — Zigbee Green Power Host Buffer Overflow Vulnerability (CVSS 9.4)
- CVE-2024-4013 — Failure to update BT Mesh Replay Protection List (CVSS 5.6)
- CVE-2023-51391 — Micrium OS Network uC-HTTP server header parsing invalid pointer dereference vulnerability (CVSS 7.5)
- CVE-2024-22473 — Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices (CVSS 7.5)
- CVE-2023-45318 — (CVSS 9.8)
- CVE-2024-0240 — Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients (CVSS 6.5)
- CVE-2023-6874 — Zigbee Unauthenticated DoS via NWK Sequence number manipulation (CVSS 7.5)
- CVE-2023-6387 — Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow (CVSS 7.5)
- CVE-2023-5138 — Glitch detection not active by default in Silicon Labs Secure Vault High devices (CVSS 6.8)
- CVE-2023-4280 — Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region (CVSS 9.8)
- CVE-2023-41097 — Potential Timing vulnerability in CBC PKCS7 padding calculations (CVSS 7.5)
- CVE-2023-4020 — Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memory (CVSS 9.1)
- CVE-2023-31247 — (CVSS 9.8)
- CVE-2023-28391 — (CVSS 9.8)
- CVE-2023-28379 — (CVSS 9.8)
- CVE-2023-27882 — (CVSS 9.8)
- CVE-2023-25181 — (CVSS 9.8)
- CVE-2023-24585 — (CVSS 9.8)
- CVE-2023-3024 — Bluetooth LE segmented 'prepare write response' packet may lead to out-of-bounds memory access (CVSS 6.5)
- CVE-2023-3488 — Uninitialized variable in Gecko Bootloader can leak secure stack (CVSS 5.5)
- CVE-2023-2747 — Uninitialized IV in Silicon Labs SE FW v2.0.0 through v 2.2.1 for internally stored data (CVSS 5.5)
- CVE-2023-2686 — (CVSS 9.8)
- CVE-2023-2687 — (CVSS 3.3)