Silicon Labs vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-94502 In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution.High 7.5 · Oct 22, 2026
• CVE-2026-85079 In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially leading to remote code execution.High 7.5 · Oct 22, 2026
• CVE-2026-66279 In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruptHigh 7.2 · Oct 22, 2026
• CVE-2026-15419 In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernelHigh 7 · Sep 10, 2026
• CVE-2026-5706 In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code executioHigh 8.9 · Aug 27, 2026
• CVE-2026-6924 A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed.High 8.7 · Jul 23, 2026
• CVE-2026-4526 In EmberZNet v9.0.2 and earlier, malformed global ZCL messages can trigger out-of-bounds reads in framework parsing logic and terminate the process.High 7.1 · Jun 25, 2026
• CVE-2026-47154 In EmberZNet v9.0.2 and earlier, a malformed GetProfileResponse message can trigger out-of-bounds reads while iterating interval entries and terminate the proceHigh 7.1 · Jun 25, 2026
• CVE-2026-47153 In EmberZNet v9.0.2 and earlier, a malformed Level Control Step command can terminate the process through a divide-by-zero fault.High 7.1 · Jun 25, 2026
• CVE-2026-47152 In EmberZNet v9.0.2 and earlier, a malformed Level Control Move command can terminate the process through a divide-by-zero fault.High 7.1 · Jun 25, 2026
• CVE-2026-47151 In EmberZNet v9.0.2 and earlier, malformed ClearWeekdaySchedule messages can trigger out-of-bounds writes into Door Lock schedule state.High 7.1 · Jun 25, 2026
• CVE-2026-47150 In EmberZNet v9.0.2 and earlier, malformed IAS Zone enrollment messages can trigger an out-of-bounds state-table write and terminate the process.High 7.1 · Jun 25, 2026
• CVE-2026-47149 In EmberZNet v9.0.2 and earlier, malformed or out-of-range Door Lock user identifiers can trigger out-of-bounds table reads and terminate the process.High 7.1 · Jun 25, 2026
• CVE-2026-47148 In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigger repeated reads past the end of the message payload and terminate the process.High 7.1 · Jun 25, 2026
• CVE-2026-47147 In EmberZNet v9.0.2 and earlier, malformed OTA requests can drive the OTA server parser into out-of-bounds reads.High 7.1 · Jun 25, 2026
• CVE-2026-47146 In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process.High 7.1 · Jun 25, 2026
• CVE-2026-47145 In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process.High 7.1 · Jun 25, 2026
• CVE-2026-2815 Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keysHigh 8.4 · Jun 25, 2026
• CVE-2026-3290 Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable valuesHigh 7.4 · May 14, 2026
• CVE-2025-2837 Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability.High 8.8 · Mar 26, 2025
• CVE-2024-24731 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS.High 7.5 · Jan 30, 2025
• CVE-2024-23973 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS.High 8.8 · Jan 30, 2025
• CVE-2024-23938 Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution Vulnerability.High 8.8 · Sep 28, 2024
• CVE-2024-22472 A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issue affects High 8.1 · May 7, 2024
• CVE-2023-51395 The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices.High 8.8 · Mar 7, 2024