silabs güvenlik açıkları (CVE)

silabs için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

22 sonuç
7.5Yüksek
CVE-2026-85079

Out-of-bounds write in Zigbee Simple_Desc_req handling

Silicon Labs EmberZNet

In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a…

7.5Yüksek
CVE-2026-94502

Out-of-bounds write in Zigbee Publish Price Matrix handling

Silicon Labs EmberZNet

In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the…

7.1Yüksek
CVE-2026-47152

Level Control Move divide-by-zero in EmberZNet v9.0.2

Silicon Labs EmberZNet

In EmberZNet v9.0.2 and earlier, a malformed Level Control Move command can terminate the process through a divide-by-zero fault. This command must come from a device that has already joined the network. Only devices supporting the Level Control cluster may b…

7.1Yüksek
CVE-2026-47149

Door Lock GetUserType invalid table index in EmberZNet v9.0.2

Silicon Labs EmberZNet

In EmberZNet v9.0.2 and earlier, malformed or out-of-range Door Lock user identifiers can trigger out-of-bounds table reads and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back …

4.3Orta
CVE-2024-23937

Silicon Labs Gecko OS Debug Interface Format String

Silicon Labs Gecko OS

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the debug interface. The …

7.5Yüksek
CVE-2024-24731

Silicon Labs Gecko OS http_download Stack-based Buffer Overflow

Silicon Labs Gecko OS

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the http_do…