2.3Baja
CVE-2025-14547ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs
Descripción
An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.
Debilidad (CWE):
CWE-191
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| silabs.com | Gecko SDK | ≤ 2.5.x | |
| silabs.com | Simplicity SDK | ≤ 2025.6.2 |
Referencias y parches
- https://community.silabs.com/068Vm00000e1UTF vendor-advisory