CVE-2023-51391: Micrium OS Network uC-HTTP server header parsing invalid pointer dereference vulnerability

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-04-16 · updated 2026-06-17
Weakness: CWE-125

Description

A bug in Micrium OS Network HTTP Server permits an invalid pointer dereference during header processing - potentially allowing a device crash and Denial of Service.

Affected products

silabs.com Gecko Platform: before 4.4.2 — fixed in 4.4.2

How to fix

Upgrade to a fixed version: silabs.com Gecko Platform 4.4.2. Check the vendor advisory for mitigations.

References

https://community.silabs.com/068Vm000004688g
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1945
https://community.silabs.com/068Vm000004688g
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1945

Get alerted when CVE-2023-51391 or the next vulnerability affects your stack