What’s Vulnerable › Vulnerabilities

CVE-2024-9496: Uncontrolled search path can lead to DLL hijacking in USBXpress Dev Kit installer

• Severity: high (CVSS 8.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-01-24 · updated 2026-06-17
• Weakness: CWE-427

Description

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress Dev Kit installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.

Affected products

• silabs.com USBXpress Dev Kit: through 3.5.1

References

• https://community.silabs.com/068Vm00000JUQwd

Get alerted when CVE-2024-9496 or the next vulnerability affects your stack