2.3Niedrig
CVE-2025-14547ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs
Beschreibung
An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.
Schwachstellentyp (CWE):
CWE-191
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| silabs.com | Gecko SDK | ≤ 2.5.x | |
| silabs.com | Simplicity SDK | ≤ 2025.6.2 |
Referenzen und Patches
- https://community.silabs.com/068Vm00000e1UTF vendor-advisory