SI
Vendor
Silabs
129
CVEs
0
On KEV
5
New 30D
Products
EM9.8
Emberznet
Silabs
22 CVEs0 on KEV5 new
GS9.8
Gecko Software Development Kit
Silabs
31 CVEs0 on KEV0 new
ZS8.8
Z-wave Software Development Kit
Silabs
10 CVEs0 on KEV0 new
GO8.8
Gecko OS
Silabs
6 CVEs0 on KEV0 new
ZG9.8
Z/ip Gateway Sdk
Silabs
6 CVEs0 on KEV0 new
5S8.1
500 Series Firmware
Silabs
4 CVEs0 on KEV0 new
BL8.8
Bluetooth Low Energy Software Development Kit
Silabs
4 CVEs0 on KEV0 new
ES7.5
Emberznet Sdk
Silabs
4 CVEs0 on KEV0 new
GB9.8
Gecko Bootloader
Silabs
3 CVEs0 on KEV0 new
ZF8.3
Zm5101 Firmware
Silabs
3 CVEs0 on KEV0 new
ZF8.3
Zm5202 Firmware
Silabs
3 CVEs0 on KEV0 new
7S6.5
700 Series Firmware
Silabs
2 CVEs0 on KEV0 new
MU9.8
Micrium Uc-http
Silabs
2 CVEs0 on KEV0 new
UZ6.5
Uzb-7
Silabs
2 CVEs0 on KEV0 new
ZP6.5
Z-wave Pc-based Controller
Silabs
2 CVEs0 on KEV0 new
ZF8.3
Zgm130s037hgn Firmware
Silabs
2 CVEs0 on KEV0 new
ZF8.3
Zgm2305a27hgn Firmware
Silabs
2 CVEs0 on KEV0 new
ZF8.3
Zgm230sb27hgn Firmware
Silabs
2 CVEs0 on KEV0 new
1S8.8
100 Series Firmware
Silabs
1 CVEs0 on KEV0 new
2S8.8
200 Series Firmware
Silabs
1 CVEs0 on KEV0 new
3S8.8
300 Series Firmware
Silabs
1 CVEs0 on KEV0 new
GP9.8
Gecko Platform
Silabs
1 CVEs0 on KEV0 new
IW6.5
Iwrap
Silabs
1 CVEs0 on KEV0 new
MO6.5
Micrium OS
Silabs
1 CVEs0 on KEV0 new
OS9.1
Openthread Sdk
Silabs
1 CVEs0 on KEV0 new
SF6.5
Sd3502 Firmware
Silabs
1 CVEs0 on KEV0 new
SF6.5
Sd3503 Firmware
Silabs
1 CVEs0 on KEV0 new
SS6.5
Simplicity Software Development Kit
Silabs
1 CVEs0 on KEV0 new
SI6.5
Sisdk
Silabs
1 CVEs0 on KEV0 new
UC9.8
Uc/tcp-ip
Silabs
1 CVEs0 on KEV0 new
US8.8
Unify Software Development Kit
Silabs
1 CVEs0 on KEV0 new
WS5.3
Wi-sun Software Development Kit
Silabs
1 CVEs0 on KEV0 new
WS5.3
Wireless Smart Ubiquitous Network Linux Border Router Firmware
Silabs
1 CVEs0 on KEV0 new
ZS6.5
Z-wave S0 Firmware
Silabs
1 CVEs0 on KEV0 new
ZS6.5
Z-wave S2 Firmware
Silabs
1 CVEs0 on KEV0 new
ZE6.5
Zigbee Emberznet
Silabs
1 CVEs0 on KEV0 new
ZF6.5
Zm5304 Firmware
Silabs
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-85079 | EM Emberznet Silabs | 9.8 | Oct 22 | Out-of-bounds write in Zigbee Simple_Desc_req handling |
| CVE-2026-94502 | EM Emberznet Silabs | 9.8 | Oct 22 | Out-of-bounds write in Zigbee Publish Price Matrix handling |
| CVE-2026-66282 | EM Emberznet Silabs | 7.5 | Oct 22 | Authenticated Denial-of-Service in Zigbee Publish Billing Period |
| CVE-2026-66281 | EM Emberznet Silabs | 7.5 | Oct 22 | Authenticated Denial-of-Service in Zigbee Discover Attributes Handling |
| CVE-2026-85080 | EM Emberznet Silabs | 9.1 | Oct 22 | Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling |
| CVE-2026-47154 | EM Emberznet Silabs | 6.5 | Jun 25 | Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2 |
| CVE-2026-47153 | EM Emberznet Silabs | 6.5 | Jun 25 | Level Control Step With On/Off divide-by-zero in EmberZNet v9.0.2 |
| CVE-2026-47152 | EM Emberznet Silabs | 6.5 | Jun 25 | Level Control Move divide-by-zero in EmberZNet v9.0.2 |
| CVE-2026-47151 | EM Emberznet Silabs | 7.1 | Jun 25 | Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2 |
| CVE-2026-47150 | EM Emberznet Silabs | 7.1 | Jun 25 | IAS Zone enroll invalid table index and write in EmberZNet 9.0.2 |
| CVE-2026-47149 | EM Emberznet Silabs | 6.5 | Jun 25 | Door Lock GetUserType invalid table index in EmberZNet v9.0.2 |
| CVE-2026-47148 | EM Emberznet Silabs | 6.5 | Jun 25 | Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2 |
| CVE-2026-47147 | EM Emberznet Silabs | 7.1 | Jun 25 | OTA server raw parser missing per-field bounds validation in EmberZNet v9.0.2 |
| CVE-2026-47146 | EM Emberznet Silabs | 6.5 | Jun 25 | Color Control color-temperature assertion abort in EmberZNet v9.0.2 |
| CVE-2026-47145 | EM Emberznet Silabs | 6.5 | Jun 25 | Color Control hue/saturation assertion abort in EmberZNet v9.0.2 |
| CVE-2026-4526 | EM Emberznet Silabs | 6.5 | Jun 25 | Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2 |
| CVE-2025-12131 | SS Simplicity Software Development Kit Silabs | 6.5 | Feb 5 | Truncated 802.15.4 packet leads to denial of service |
| CVE-2025-2838 | GO Gecko OS Silabs | 6.5 | Mar 26 | Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability |
| CVE-2025-2837 | GO Gecko OS Silabs | 8.8 | Mar 26 | Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2024-23937 | GO Gecko OS Silabs | 4.3 | Jan 31 | Silicon Labs Gecko OS Debug Interface Format String |
| CVE-2024-23973 | GO Gecko OS Silabs | 8.8 | Jan 30 | Silicon Labs Gecko OS HTTP GET Request Handling Stack-based Buffer Overflow |
| CVE-2024-24731 | GO Gecko OS Silabs | 8.8 | Jan 30 | Silicon Labs Gecko OS http_download Stack-based Buffer Overflow |
| CVE-2024-50928 | ZS Z-wave Software Development Kit Silabs | 6.5 | Dec 10 | Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the wakeup interval of end devices in controller memory, disrupting the… |
| CVE-2024-50931 | ZS Z-wave Software Development Kit Silabs | 4.6 | Dec 10 | Silicon Labs Z-Wave Series 500 v6.84.0 was discovered to contain insecure permissions |
| CVE-2024-50930 | ZS Z-wave Software Development Kit Silabs | 8.8 | Dec 10 | An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code |
| CVE-2024-50929 | ZS Z-wave Software Development Kit Silabs | 6.2 | Dec 10 | Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to arbitrarily change the device type in the controller's memory, leading to a… |
| CVE-2024-50924 | ZS Z-wave Software Development Kit Silabs | 6.5 | Dec 10 | Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller and the device itself via… |
| CVE-2024-50921 | ZS Z-wave Software Development Kit Silabs | 6.5 | Dec 10 | Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause a Denial of Service (DoS) via repeatedly sending crafted packets to the… |
| CVE-2024-50920 | ZS Z-wave Software Development Kit Silabs | 8.8 | Dec 10 | Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets |
| CVE-2024-23938 | GO Gecko OS Silabs | 8.8 | Sep 28 | Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2023-41093 | BL Bluetooth Low Energy Software Development Kit Silabs | 3.1 | Jul 12 | Loss of confidentiality due to potential race condition in Bluetooth controller Connection_Handle reuse |
| CVE-2024-3017 | SI Sisdk Silabs | 6.5 | Jun 27 | Denial of service in multi-protocol gateway - Zigbee + Thread |
| CVE-2024-3043 | ES Emberznet Sdk Silabs | 7.5 | Jun 27 | Zigbee co-ordinator realignment packet may lead to denial of service |
| CVE-2024-22472 | ZS Z-wave Software Development Kit Silabs | 8.1 | May 7 | Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow |
| CVE-2024-3051 | ZG Z\/ip Gateway Sdk Silabs | 7.5 | Apr 26 | Z/IP Gateway Device Reset Locally Denial of Service Vulnerability |
| CVE-2023-51391 | GS Gecko Software Development Kit Silabs | 7.5 | Apr 16 | Micrium OS Network uC-HTTP server header parsing invalid pointer dereference vulnerability |
| CVE-2023-51395 | ZS Z-wave Software Development Kit Silabs | 8.8 | Mar 7 | Z-Wave S0 Decryption Vulnerability in End Devices |
| CVE-2023-51393 | EM Emberznet Silabs | 7.5 | Feb 23 | Potential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer |
| CVE-2023-51394 | EM Emberznet Silabs | 7.5 | Feb 23 | Potential DoS for EFR32xxx parts in high traffic environments due to null buffer dereference / crash |
| CVE-2023-51392 | EM Emberznet Silabs | 9.8 | Feb 23 | Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM |
| CVE-2023-6640 | ZP Z-wave Pc-based Controller Silabs | 6.5 | Feb 21 | Silicon Labs PC Controller v5.54.0 and Earlier Denial of Service Vulnerability |
| CVE-2023-6533 | ZP Z-wave Pc-based Controller Silabs | 6.5 | Feb 21 | Silicon Labs PC Controller Denial of Service Vulnerability |
| CVE-2024-22473 | GS Gecko Software Development Kit Silabs | 7.5 | Feb 21 | Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices |
| CVE-2023-45318 | GS Gecko Software Development Kit Silabs | 9.8 | Feb 20 | A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004 |
| CVE-2024-0240 | GS Gecko Software Development Kit Silabs | 6.5 | Feb 15 | Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients |
| CVE-2023-6874 | GS Gecko Software Development Kit Silabs | 7.5 | Feb 5 | Zigbee Unauthenticated DoS via NWK Sequence number manipulation |
| CVE-2023-6387 | GS Gecko Software Development Kit Silabs | 7.5 | Feb 2 | Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow |
| CVE-2023-5138 | GS Gecko Software Development Kit Silabs | 6.8 | Jan 3 | Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB, except EFR32xG21B |
| CVE-2023-4280 | GS Gecko Software Development Kit Silabs | 9.8 | Jan 2 | An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted… |
| CVE-2023-41097 | GS Gecko Software Development Kit Silabs | 7.5 | Dec 21 | An Observable Timing Discrepancy, Covert Timing Channel vulnerability in Silabs GSDK on ARM potentially allows Padding Oracle Crypto Attack on CBC PKCS7.This issue affects GSDK:… |
| CVE-2023-4020 | GS Gecko Software Development Kit Silabs | 9.1 | Dec 15 | An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows reading/writing of… |
| CVE-2023-5310 | ZS Z-wave Software Development Kit Silabs | 6.5 | Dec 15 | A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier |
| CVE-2023-4489 | ZG Z/ip Gateway Sdk Silabs | 9.8 | Dec 14 | The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK v7.18.3 and earlier |
| CVE-2023-31247 | GS Gecko Software Development Kit Silabs | 9.8 | Nov 14 | A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01 |
| CVE-2023-28391 | GS Gecko Software Development Kit Silabs | 9.8 | Nov 14 | A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01 |
| CVE-2023-28379 | GS Gecko Software Development Kit Silabs | 9.8 | Nov 14 | A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01 |
| CVE-2023-27882 | GS Gecko Software Development Kit Silabs | 9.8 | Nov 14 | A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01 |
| CVE-2023-25181 | GS Gecko Software Development Kit Silabs | 9.8 | Nov 14 | A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01 |
| CVE-2023-24585 | GS Gecko Software Development Kit Silabs | 9.8 | Nov 14 | An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01 |
| CVE-2023-41096 | ES Emberznet Sdk Silabs | 6.1 | Oct 26 | Missing Encryption of Security Keys vulnerability in Silicon Labs Ember ZNet SDK on 32 bit, ARM (SecureVault High modules) allows potential modification or extraction of network… |
