SI
Vendor
silabs.com
83
CVEs
0
On KEV
0
New 30D
Products
GS9.8
GSDK
silabs.com
10 CVEs0 on KEV0 new
SS9.4
Simplicity SDK
silabs.com
7 CVEs0 on KEV0 new
WI8.8
WiseConnect
silabs.com
7 CVEs0 on KEV0 new
EZ9.8
Ember ZNet SDK
silabs.com
6 CVEs0 on KEV0 new
GS9.4
Gecko SDK
silabs.com
5 CVEs0 on KEV0 new
BT7.1
BT122
silabs.com
3 CVEs0 on KEV0 new
RB6.5
RS9116 Bluetooth SDK
silabs.com
3 CVEs0 on KEV0 new
SI6.5
SiSDK
silabs.com
3 CVEs0 on KEV0 new
ZG9.8
Z/IP Gateway SDK
silabs.com
3 CVEs0 on KEV0 new
GB9.1
Gecko Bootloader
silabs.com
2 CVEs0 on KEV0 new
PC6.5
PC Controller
silabs.com
2 CVEs0 on KEV0 new
CW8.6
Configuration Wizard 2
silabs.com
1 CVEs0 on KEV0 new
CV8.6
CP210 VCP Win 2k
silabs.com
1 CVEs0 on KEV0 new
CV8.6
CP210x VCP Windows
silabs.com
1 CVEs0 on KEV0 new
EB6.5
EFR32 BLE SDK
silabs.com
1 CVEs0 on KEV0 new
EM5.8
EmberZNet
silabs.com
1 CVEs0 on KEV0 new
ES6.5
EmberZNet SDK
silabs.com
1 CVEs0 on KEV0 new
FP8.6
Flash Programming Utility
silabs.com
1 CVEs0 on KEV0 new
OP5.3
OpenThread
silabs.com
1 CVEs0 on KEV0 new
OS9.1
OpenThread SDK
silabs.com
1 CVEs0 on KEV0 new
RS7.1
RS9116W
silabs.com
1 CVEs0 on KEV0 new
SF2.0
SE Firmware
silabs.com
1 CVEs0 on KEV0 new
S21.0
Series 2 SoCs and associated modules
silabs.com
1 CVEs0 on KEV0 new
SL8.6
Silicon Labs IDE (8-bit)
silabs.com
1 CVEs0 on KEV0 new
SL6.0
Silicon Labs Matter
silabs.com
1 CVEs0 on KEV0 new
SL7.6
Silicon Labs Z-Wave SDK
silabs.com
1 CVEs0 on KEV0 new
SL9.2
Silicon Labs Zigbee Stack
silabs.com
1 CVEs0 on KEV0 new
SD7.5
Simplicity Device Manager
silabs.com
1 CVEs0 on KEV0 new
SI2.1
Simplicity Installer tool (Silicon Labs Tool - SLT) for Simplicity Studio v6
silabs.com
1 CVEs0 on KEV0 new
SS2.4
Simplicity SDK, Gecko SDK
silabs.com
1 CVEs0 on KEV0 new
SS2.1
Simplicity Studio v5
silabs.com
1 CVEs0 on KEV0 new
SS7.4
Simplicity Studio V6
silabs.com
1 CVEs0 on KEV0 new
TO8.6
ToolStick
silabs.com
1 CVEs0 on KEV0 new
U48.6
USBXpress 4 SDK
silabs.com
1 CVEs0 on KEV0 new
UD8.6
USBXpress Dev Kit
silabs.com
1 CVEs0 on KEV0 new
US8.6
USBXpress SDK
silabs.com
1 CVEs0 on KEV0 new
UW8.6
USBXpress Win 98SE Dev Kit
silabs.com
1 CVEs0 on KEV0 new
WS8.6
Wi-SUN Stack
silabs.com
1 CVEs0 on KEV0 new
WI7.1
WiseCnnect
silabs.com
1 CVEs0 on KEV0 new
WS7.5
WiSeConnect SDK
silabs.com
1 CVEs0 on KEV0 new
ZP5.3
Z-Wave Protocol Controller
silabs.com
1 CVEs0 on KEV0 new
ZI5.9
Zigbee
silabs.com
1 CVEs0 on KEV0 new
ZS5.9
Zigbee Stack
silabs.com
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-16769 | WI WiseCnnect silabs.com | 7.1 | Sep 8 | RS9116W/SiWx917 plaintext pause encryption request causes DOS |
| CVE-2026-65936 | WI WiseConnect silabs.com | 5.3 | Aug 13 | RS9116W/SiWx917 malformed packet with increased length field causes memory leak |
| CVE-2026-65935 | WI WiseConnect silabs.com | 7.6 | Aug 13 | Bypassing passkey entry in legacy pairing |
| CVE-2026-65934 | BT BT122 silabs.com | 7.1 | Aug 13 | BT122 plaintext pause encryption request causes DOS |
| CVE-2026-65933 | BT BT122 silabs.com | 5.3 | Aug 13 | BT122 malformed packet with increased length field causes memory leak |
| CVE-2026-65932 | BT BT122 silabs.com | 5.3 | Aug 13 | BT122 stops advertising |
| CVE-2026-19293 | WI WiseConnect silabs.com | 8.8 | Aug 13 | SMP security request |
| CVE-2026-19292 | WI WiseConnect silabs.com | 8.8 | Aug 13 | Bluetooth re-pairing with legitimate device can use lower security level |
| CVE-2026-19291 | WI WiseConnect silabs.com | 8.8 | Aug 13 | Bluetooth re-pairing can use a lower security level than previous |
| CVE-2026-16101 | WI WiseConnect silabs.com | 8.8 | Aug 13 | forced re-pairing with already bonded device |
| CVE-2026-4930 | SS Simplicity SDK silabs.com | 7.1 | Jun 25 | DPA Countermeasures weakening on Series 3 devices |
| CVE-2026-8676 | SS Simplicity SDK silabs.com | 8.8 | May 26 | An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond |
| CVE-2025-14972 | SS Simplicity SDK silabs.com | 4.1 | May 15 | Insufficient DPA countermeasure reseeding |
| CVE-2025-11571 | SS Simplicity Studio v5 silabs.com | 2.1 | Mar 24 | Command Execution vulnerability in Simplicity Installer |
| CVE-2025-14055 | SS Simplicity SDK, Gecko SDK silabs.com | 2.4 | Feb 20 | Integer underflow in Secure NCP host |
| CVE-2025-14547 | GS Gecko SDK silabs.com | 2.3 | Feb 20 | ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs |
| CVE-2026-0619 | SL Silicon Labs Matter silabs.com | 6.0 | Feb 12 | Integer Wraparound DoS in Silicon Labs Matter Implementation |
| CVE-2025-11004 | SD Simplicity Device Manager silabs.com | 7.5 | Feb 10 | Reflected XSS vulnerability in Simplicity Device Manager tool |
| CVE-2025-7432 | SS Simplicity SDK silabs.com | 1.0 | Feb 9 | DPA countermeasures not reseeded under certain conditions |
| CVE-2025-12131 | ES EmberZNet SDK silabs.com | 6.5 | Feb 5 | Truncated 802.15.4 packet leads to denial of service |
| CVE-2025-7964 | SL Silicon Labs Zigbee Stack silabs.com | 9.2 | Jan 30 | Zigbee Router Denial of Service |
| CVE-2025-10933 | ZP Z-Wave Protocol Controller silabs.com | 5.3 | Jan 5 | Silicon Labs Z-Wave Protocol Controller Integer underflow vulnerability leads to out of bounds read |
| CVE-2025-12986 | GS Gecko SDK silabs.com | 6.0 | Dec 4 | Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devices |
| CVE-2025-10285 | SS Simplicity Studio V6 silabs.com | 7.4 | Dec 4 | Simplcity Device Manager exposes NTLMv2 hash |
| CVE-2025-4321 | RS RS9116W silabs.com | 7.1 | Nov 17 | DoS in RS9116W-WiSeConnect L2CAP protocol due to reception of malformed packets |
| CVE-2025-10693 | SL Silicon Labs Z-Wave SDK silabs.com | 7.6 | Oct 31 | Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure |
| CVE-2025-8414 | SS Simplicity SDK silabs.com | 9.4 | Oct 17 | Zigbee Green Power Host Buffer Overflow Vulnerability |
| CVE-2025-7448 | WS Wi-SUN Stack silabs.com | 8.6 | Sep 12 | Man in the middle (MitM) attack vulnerability in Wi-SUN library |
| CVE-2025-1394 | ZS Zigbee Stack silabs.com | 5.9 | Jul 30 | Denial of Service (DoS) vulnerabilitiey in Zigbee library |
| CVE-2025-1221 | ZI Zigbee silabs.com | 5.9 | Jul 30 | DoS in Zigbee device due to heavy traffic |
| CVE-2025-2329 | OP OpenThread silabs.com | 5.3 | Jul 25 | High traffic causes corrupt SPI packets in OpenThread leading to denial of service |
| CVE-2025-3873 | WI WiseConnect silabs.com | 6.0 | Jul 25 | Buffer overflow in Si91x crypto APIs |
| CVE-2025-3301 | S2 Series 2 SoCs and associated modules silabs.com | 1.0 | Apr 29 | DPA Countermeasures Unavailable for Certain Cryptographic Operations on Series 2 Devices |
| CVE-2024-6351 | SI SiSDK silabs.com | 4.3 | Jan 28 | Malformed packet leads to denial of service in NWK/APS layer |
| CVE-2024-9499 | UW USBXpress Win 98SE Dev Kit silabs.com | 8.6 | Jan 24 | Uncontrolled search path can lead to DLL hijacking in USBXpress Win 98SE Dev Kit installer |
| CVE-2024-9498 | US USBXpress SDK silabs.com | 8.6 | Jan 24 | Uncontrolled search path can lead to DLL hijacking in USBXpress SDK installer |
| CVE-2024-9497 | U4 USBXpress 4 SDK silabs.com | 8.6 | Jan 24 | Uncontrolled search path can lead to DLL hijacking in USBXpress 4 SDK installer |
| CVE-2024-9496 | UD USBXpress Dev Kit silabs.com | 8.6 | Jan 24 | Uncontrolled search path can lead to DLL hijacking in USBXpress Dev Kit installer |
| CVE-2024-9495 | CV CP210x VCP Windows silabs.com | 8.6 | Jan 24 | Uncontrolled search path can lead to DLL hijacking in CP210x VCP Windows installer |
| CVE-2024-9494 | CV CP210 VCP Win 2k silabs.com | 8.6 | Jan 24 | Uncontrolled search path can lead to DLL hijacking in CP210 VCP Win 2k installer |
| CVE-2024-9493 | TO ToolStick silabs.com | 8.6 | Jan 24 | Uncontrolled search path can lead to DLL hijacking in ToolStick installer |
| CVE-2024-9492 | FP Flash Programming Utility silabs.com | 8.6 | Jan 24 | Uncontrolled search path can lead to DLL hijacking in Flash Programming Utility installer |
| CVE-2024-9491 | CW Configuration Wizard 2 silabs.com | 8.6 | Jan 24 | Uncontrolled search path can lead to DLL hijacking in Configuration Wizard 2 installer |
| CVE-2024-9490 | SL Silicon Labs IDE (8-bit) silabs.com | 8.6 | Jan 24 | Uncontrolled search path can lead to DLL hijacking in Silicon Labs IDE installer |
| CVE-2024-7322 | EM EmberZNet silabs.com | 5.8 | Jan 15 | Dos in ZigBee device due to unsolicited encrypted rejoin response |
| CVE-2024-6352 | SI SiSDK silabs.com | 4.3 | Jan 13 | Malformed packet leads to denial of service in APS layer |
| CVE-2024-10106 | EZ Ember ZNet SDK silabs.com | 3.7 | Jan 9 | Ember ZNet buffer overflow in 'packet handoff' plugin |
| CVE-2024-6350 | SS Simplicity SDK silabs.com | 6.5 | Jan 8 | EmberZNet malformed MAC layer packet leads to denial of service |
| CVE-2024-8361 | WS WiSeConnect SDK silabs.com | 7.5 | Jan 7 | DoS caused due to wrong hash length returned for SHA2/224 algorithm |
| CVE-2024-7139 | RB RS9116 Bluetooth SDK silabs.com | 6.5 | Dec 19 | Denial of Service in Silicon Labs RS9116 Bluetooth SDK |
| CVE-2024-7138 | RB RS9116 Bluetooth SDK silabs.com | 6.5 | Dec 19 | Denial of Service in Silicon Labs RS9116 Bluetooth SDK |
| CVE-2024-7137 | RB RS9116 Bluetooth SDK silabs.com | 6.5 | Dec 19 | Denial of Service in Silicon Labs RS9116 Bluetooth SDK |
| CVE-2024-6657 | EB EFR32 BLE SDK silabs.com | 6.5 | Oct 11 | BLE peripheral DoS after few cycles of connect/disconnects |
| CVE-2024-2502 | SF SE Firmware silabs.com | 2.0 | Aug 29 | Failure to update the tamper reset cause register when a tamper event occurs |
| CVE-2024-3017 | SI SiSDK silabs.com | 6.5 | Jun 27 | Denial of service in multi-protocol gateway - Zigbee + Thread |
| CVE-2024-3043 | EZ Ember ZNet SDK silabs.com | 7.5 | Jun 27 | Zigbee co-ordinator realignment packet may lead to denial of service |
| CVE-2024-4013 | GS Gecko SDK silabs.com | 5.6 | Jun 6 | Failure to update BT Mesh Replay Protection List |
| CVE-2024-3052 | ZG Z/IP Gateway SDK silabs.com | 7.5 | Apr 26 | Z/IP Gateway S2 Nonce Get Denial of Service Vulnerability |
| CVE-2024-3051 | ZG Z/IP Gateway SDK silabs.com | 7.5 | Apr 26 | Z/IP Gateway Device Reset Locally Denial of Service Vulnerability |
| CVE-2023-51393 | EZ Ember ZNet SDK silabs.com | 7.5 | Feb 23 | Potential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer |