SI
Vendor
Silabs
37 products with CVEs on record
129
CVEs
0
On KEV
5
New 30D
Products
EM
Emberznet
Silabs
9.8
22 CVEs0 on KEV5 new
GS
Gecko Software Development Kit
Silabs
9.8
31 CVEs0 on KEV0 new
ZS
Z-wave Software Development Kit
Silabs
8.8
10 CVEs0 on KEV0 new
GO
Gecko OS
Silabs
8.8
6 CVEs0 on KEV0 new
ZG
Z/ip Gateway Sdk
Silabs
9.8
6 CVEs0 on KEV0 new
5S
500 Series Firmware
Silabs
8.1
4 CVEs0 on KEV0 new
BL
Bluetooth Low Energy Software Development Kit
Silabs
8.8
4 CVEs0 on KEV0 new
ES
Emberznet Sdk
Silabs
7.5
4 CVEs0 on KEV0 new
GB
Gecko Bootloader
Silabs
9.8
3 CVEs0 on KEV0 new
ZF
Zm5101 Firmware
Silabs
8.3
3 CVEs0 on KEV0 new
ZF
Zm5202 Firmware
Silabs
8.3
3 CVEs0 on KEV0 new
7S
700 Series Firmware
Silabs
6.5
2 CVEs0 on KEV0 new
MU
Micrium Uc-http
Silabs
9.8
2 CVEs0 on KEV0 new
UZ
Uzb-7
Silabs
6.5
2 CVEs0 on KEV0 new
ZP
Z-wave Pc-based Controller
Silabs
6.5
2 CVEs0 on KEV0 new
ZF
Zgm130s037hgn Firmware
Silabs
8.3
2 CVEs0 on KEV0 new
ZF
Zgm2305a27hgn Firmware
Silabs
8.3
2 CVEs0 on KEV0 new
ZF
Zgm230sb27hgn Firmware
Silabs
8.3
2 CVEs0 on KEV0 new
1S
100 Series Firmware
Silabs
8.8
1 CVEs0 on KEV0 new
2S
200 Series Firmware
Silabs
8.8
1 CVEs0 on KEV0 new
3S
300 Series Firmware
Silabs
8.8
1 CVEs0 on KEV0 new
GP
Gecko Platform
Silabs
9.8
1 CVEs0 on KEV0 new
IW
Iwrap
Silabs
6.5
1 CVEs0 on KEV0 new
MO
Micrium OS
Silabs
6.5
1 CVEs0 on KEV0 new
OS
Openthread Sdk
Silabs
9.1
1 CVEs0 on KEV0 new
SF
Sd3502 Firmware
Silabs
6.5
1 CVEs0 on KEV0 new
SF
Sd3503 Firmware
Silabs
6.5
1 CVEs0 on KEV0 new
SS
Simplicity Software Development Kit
Silabs
6.5
1 CVEs0 on KEV0 new
SI
Sisdk
Silabs
6.5
1 CVEs0 on KEV0 new
UC
Uc/tcp-ip
Silabs
9.8
1 CVEs0 on KEV0 new
US
Unify Software Development Kit
Silabs
8.8
1 CVEs0 on KEV0 new
WS
Wi-sun Software Development Kit
Silabs
5.3
1 CVEs0 on KEV0 new
WS
Wireless Smart Ubiquitous Network Linux Border Router Firmware
Silabs
5.3
1 CVEs0 on KEV0 new
ZS
Z-wave S0 Firmware
Silabs
6.5
1 CVEs0 on KEV0 new
ZS
Z-wave S2 Firmware
Silabs
6.5
1 CVEs0 on KEV0 new
ZE
Zigbee Emberznet
Silabs
6.5
1 CVEs0 on KEV0 new
ZF
Zm5304 Firmware
Silabs
6.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-85079
EM
Emberznet
Silabs
9.8
0%
Oct 22Out-of-bounds write in Zigbee Simple_Desc_req handling
CVE-2026-94502
EM
Emberznet
Silabs
9.8
0%
Oct 22Out-of-bounds write in Zigbee Publish Price Matrix handling
CVE-2026-66282
EM
Emberznet
Silabs
7.5
0%
Oct 22Authenticated Denial-of-Service in Zigbee Publish Billing Period
CVE-2026-66281
EM
Emberznet
Silabs
7.5
0%
Oct 22Authenticated Denial-of-Service in Zigbee Discover Attributes Handling
CVE-2026-85080
EM
Emberznet
Silabs
9.1
0%
Oct 22Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling
CVE-2026-47154
EM
Emberznet
Silabs
6.5
0%
Jun 25Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2
CVE-2026-47153
EM
Emberznet
Silabs
6.5
0%
Jun 25Level Control Step With On/Off divide-by-zero in EmberZNet v9.0.2
CVE-2026-47152
EM
Emberznet
Silabs
6.5
0%
Jun 25Level Control Move divide-by-zero in EmberZNet v9.0.2
CVE-2026-47151
EM
Emberznet
Silabs
7.1
0%
Jun 25Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2
CVE-2026-47150
EM
Emberznet
Silabs
7.1
0%
Jun 25IAS Zone enroll invalid table index and write in EmberZNet 9.0.2
CVE-2026-47149
EM
Emberznet
Silabs
6.5
0%
Jun 25Door Lock GetUserType invalid table index in EmberZNet v9.0.2
CVE-2026-47148
EM
Emberznet
Silabs
6.5
0%
Jun 25Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2
CVE-2026-47147
EM
Emberznet
Silabs
7.1
0%
Jun 25OTA server raw parser missing per-field bounds validation in EmberZNet v9.0.2
CVE-2026-47146
EM
Emberznet
Silabs
6.5
0%
Jun 25Color Control color-temperature assertion abort in EmberZNet v9.0.2
CVE-2026-47145
EM
Emberznet
Silabs
6.5
0%
Jun 25Color Control hue/saturation assertion abort in EmberZNet v9.0.2
CVE-2026-4526
EM
Emberznet
Silabs
6.5
0%
Jun 25Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2
CVE-2025-12131
SS
Simplicity Software Development Kit
Silabs
6.5
0%
Feb 5Truncated 802.15.4 packet leads to denial of service
CVE-2025-2838
GO
Gecko OS
Silabs
6.5
0%
Mar 26Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability
CVE-2025-2837
GO
Gecko OS
Silabs
8.8
0%
Mar 26Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2024-23937
GO
Gecko OS
Silabs
4.3
0%
Jan 31Silicon Labs Gecko OS Debug Interface Format String
CVE-2024-23973
GO
Gecko OS
Silabs
8.8
1%
Jan 30Silicon Labs Gecko OS HTTP GET Request Handling Stack-based Buffer Overflow
CVE-2024-24731
GO
Gecko OS
Silabs
8.8
0%
Jan 30Silicon Labs Gecko OS http_download Stack-based Buffer Overflow
CVE-2024-50928
ZS
Z-wave Software Development Kit
Silabs
6.5
0%
Dec 10Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the wakeup interval of end devices in controller memory, disrupting the…
CVE-2024-50931
ZS
Z-wave Software Development Kit
Silabs
4.6
0%
Dec 10Silicon Labs Z-Wave Series 500 v6.84.0 was discovered to contain insecure permissions
CVE-2024-50930
ZS
Z-wave Software Development Kit
Silabs
8.8
0%
Dec 10An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code
CVE-2024-50929
ZS
Z-wave Software Development Kit
Silabs
6.2
0%
Dec 10Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to arbitrarily change the device type in the controller's memory, leading to a…
CVE-2024-50924
ZS
Z-wave Software Development Kit
Silabs
6.5
0%
Dec 10Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller and the device itself via…
CVE-2024-50921
ZS
Z-wave Software Development Kit
Silabs
6.5
0%
Dec 10Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause a Denial of Service (DoS) via repeatedly sending crafted packets to the…
CVE-2024-50920
ZS
Z-wave Software Development Kit
Silabs
8.8
0%
Dec 10Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets
CVE-2024-23938
GO
Gecko OS
Silabs
8.8
1%
Sep 28Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2023-41093
BL
Bluetooth Low Energy Software Development Kit
Silabs
3.1
0%
Jul 12Loss of confidentiality due to potential race condition in Bluetooth controller Connection_Handle reuse
CVE-2024-3017
SI
Sisdk
Silabs
6.5
0%
Jun 27Denial of service in multi-protocol gateway - Zigbee + Thread
CVE-2024-3043
ES
Emberznet Sdk
Silabs
7.5
1%
Jun 27Zigbee co-ordinator realignment packet may lead to denial of service
CVE-2024-22472
ZS
Z-wave Software Development Kit
Silabs
8.1
1%
May 7Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow
CVE-2024-3051
ZG
Z\/ip Gateway Sdk
Silabs
7.5
0%
Apr 26Z/IP Gateway Device Reset Locally Denial of Service Vulnerability
CVE-2023-51391
GS
Gecko Software Development Kit
Silabs
7.5
1%
Apr 16Micrium OS Network uC-HTTP server header parsing invalid pointer dereference vulnerability
CVE-2023-51395
ZS
Z-wave Software Development Kit
Silabs
8.8
0%
Mar 7Z-Wave S0 Decryption Vulnerability in End Devices
CVE-2023-51393
EM
Emberznet
Silabs
7.5
1%
Feb 23Potential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer
CVE-2023-51394
EM
Emberznet
Silabs
7.5
1%
Feb 23Potential DoS for EFR32xxx parts in high traffic environments due to null buffer dereference / crash
CVE-2023-51392
EM
Emberznet
Silabs
9.8
0%
Feb 23Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM
CVE-2023-6640
ZP
Z-wave Pc-based Controller
Silabs
6.5
0%
Feb 21Silicon Labs PC Controller v5.54.0 and Earlier Denial of Service Vulnerability
CVE-2023-6533
ZP
Z-wave Pc-based Controller
Silabs
6.5
0%
Feb 21Silicon Labs PC Controller Denial of Service Vulnerability
CVE-2024-22473
GS
Gecko Software Development Kit
Silabs
7.5
0%
Feb 21Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices
CVE-2023-45318
GS
Gecko Software Development Kit
Silabs
9.8
2%
Feb 20A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004
CVE-2024-0240
GS
Gecko Software Development Kit
Silabs
6.5
0%
Feb 15Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients
CVE-2023-6874
GS
Gecko Software Development Kit
Silabs
7.5
0%
Feb 5Zigbee Unauthenticated DoS via NWK Sequence number manipulation
CVE-2023-6387
GS
Gecko Software Development Kit
Silabs
7.5
1%
Feb 2Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow
CVE-2023-5138
GS
Gecko Software Development Kit
Silabs
6.8
0%
Jan 3Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB, except EFR32xG21B
CVE-2023-4280
GS
Gecko Software Development Kit
Silabs
9.8
0%
Jan 2An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted…
CVE-2023-41097
GS
Gecko Software Development Kit
Silabs
7.5
0%
Dec 21An Observable Timing Discrepancy, Covert Timing Channel vulnerability in Silabs GSDK on ARM potentially allows Padding Oracle Crypto Attack on CBC PKCS7.This issue affects GSDK:…
CVE-2023-4020
GS
Gecko Software Development Kit
Silabs
9.1
1%
Dec 15An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows reading/writing of…
CVE-2023-5310
ZS
Z-wave Software Development Kit
Silabs
6.5
0%
Dec 15A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier
CVE-2023-4489
ZG
Z/ip Gateway Sdk
Silabs
9.8
1%
Dec 14The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK v7.18.3 and earlier
CVE-2023-31247
GS
Gecko Software Development Kit
Silabs
9.8
2%
Nov 14A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01
CVE-2023-28391
GS
Gecko Software Development Kit
Silabs
9.8
1%
Nov 14A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01
CVE-2023-28379
GS
Gecko Software Development Kit
Silabs
9.8
2%
Nov 14A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01
CVE-2023-27882
GS
Gecko Software Development Kit
Silabs
9.8
2%
Nov 14A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01
CVE-2023-25181
GS
Gecko Software Development Kit
Silabs
9.8
2%
Nov 14A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01
CVE-2023-24585
GS
Gecko Software Development Kit
Silabs
9.8
1%
Nov 14An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01
CVE-2023-41096
ES
Emberznet Sdk
Silabs
6.1
0%
Oct 26Missing Encryption of Security Keys vulnerability in Silicon Labs Ember ZNet SDK on 32 bit, ARM (SecureVault High modules) allows potential modification or extraction of network…