2.3Low

CVE-2025-14547ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs

silabs.com Simplicity SDK; silabs.com Gecko SDK Published: (8 months ago)

Description

An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.

Weakness (CWE): CWE-191

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
silabs.com Gecko SDK ≤ 2.5.x
silabs.com Simplicity SDK ≤ 2025.6.2

References and patches