2.3Düşük
CVE-2025-14547ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs
Açıklama
An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.
Zayıflık türü (CWE):
CWE-191
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| silabs.com | Gecko SDK | ≤ 2.5.x | |
| silabs.com | Simplicity SDK | ≤ 2025.6.2 |
Kaynaklar ve yamalar
- https://community.silabs.com/068Vm00000e1UTF vendor-advisory