2.3Low
CVE-2025-14547ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs
Description
An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.
Weakness (CWE):
CWE-191
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| silabs.com | Gecko SDK | ≤ 2.5.x | |
| silabs.com | Simplicity SDK | ≤ 2025.6.2 |
References and patches
- https://community.silabs.com/068Vm00000e1UTF vendor-advisory