silabs.com Simplicity SDK vulnerabilities (CVE)

CVE records published for silabs.com Simplicity SDK, newest first. Follow to get an email when a new one appears.

7 results
7.1High
CVE-2026-4930

DPA Countermeasures weakening on Series 3 devices

silabs.com Simplicity SDK

SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric cryptographic operations (AES encryption/decryption and hashing). DPA Countermeasures on SYMCRYPTO can be weakened (reduced entropy) by forcing ce…

8.8High
CVE-2026-8676
silabs.com Simplicity SDK

An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond.

4.1Medium
CVE-2025-14972

Insufficient DPA countermeasure reseeding

silabs.com Simplicity SDK

* Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually repeat. * KSU keys using SYMCRYPTO will be impacted by this vulnerability.

9.4Critical
CVE-2025-8414

Zigbee Green Power Host Buffer Overflow Vulnerability

silabs.com Simplicity SDK; silabs.com Gecko SDK

Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network ke…