SL
Vendor
Silicon Labs
37
CVEs
0
On KEV
8
New 30D
Products
EM7.5
EmberZNet
Silicon Labs
17 CVEs0 on KEV5 new
ZS5.3
Z-Wave SDK
Silicon Labs
2 CVEs0 on KEV2 new
CS7.2
Connect SDK
Silicon Labs
1 CVEs0 on KEV1 new
GO8.8
Gecko OS
Silicon Labs
6 CVEs0 on KEV0 new
SD7.0
silabser.sys driver
Silicon Labs
3 CVEs0 on KEV0 new
SS4.2
Simplicity SDK
Silicon Labs
3 CVEs0 on KEV0 new
SI8.4
SiSDK
Silicon Labs
2 CVEs0 on KEV0 new
BM8.9
BT Mesh SDK
Silicon Labs
1 CVEs0 on KEV0 new
RS7.4
RS9116 SDK
Silicon Labs
1 CVEs0 on KEV0 new
SL8.7
Silicon Labs Matter Github
Silicon Labs
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-89410 New | ZS Z-Wave SDK Silicon Labs | 5.1 | Oct 22 | Out-of-bounds read in Z-Wave NCP SPI Handler |
| CVE-2026-89409 New | ZS Z-Wave SDK Silicon Labs | 5.3 | Oct 22 | Unvalidated ZWAVE_CMD_NODES_EXIST May Cause Deletion of End Nodes |
| CVE-2026-85079 New | EM EmberZNet Silicon Labs | 7.5 | Oct 22 | Out-of-bounds write in Zigbee Simple_Desc_req handling |
| CVE-2026-94502 New | EM EmberZNet Silicon Labs | 7.5 | Oct 22 | Out-of-bounds write in Zigbee Publish Price Matrix handling |
| CVE-2026-66282 New | EM EmberZNet Silicon Labs | 6.0 | Oct 22 | Authenticated Denial-of-Service in Zigbee Publish Billing Period |
| CVE-2026-66281 New | EM EmberZNet Silicon Labs | 6.0 | Oct 22 | Authenticated Denial-of-Service in Zigbee Discover Attributes Handling |
| CVE-2026-85080 New | EM EmberZNet Silicon Labs | 6.0 | Oct 22 | Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling |
| CVE-2026-66279 New | CS Connect SDK Silicon Labs | 7.2 | Oct 22 | Dis-connect vulnerability in Connect Stack |
| CVE-2026-15419 | SD silabser.sys driver Silicon Labs | 7.0 | Sep 10 | CP210x Driver Memory Corruption results in Arbitrary Code Execution |
| CVE-2026-15418 | SD silabser.sys driver Silicon Labs | 2.4 | Sep 10 | CP210x Memory Leakage |
| CVE-2026-15417 | SD silabser.sys driver Silicon Labs | 6.9 | Sep 10 | CP210x Denial of Service |
| CVE-2026-17610 | SI SiSDK Silicon Labs | 6.0 | Aug 27 | RAIL 802.15.4 Mux missing ACK can lead to DoS |
| CVE-2026-5706 | BM BT Mesh SDK Silicon Labs | 8.9 | Aug 27 | Buffer overflow in Bluetooth Mesh SDK when handling extended advertisements |
| CVE-2026-6924 | SL Silicon Labs Matter Github Silicon Labs | 8.7 | Jul 23 | Weak entropy initialization in Silicon Labs Matter SiWx917 TinyCrypt path |
| CVE-2026-6432 | EM EmberZNet Silicon Labs | 5.3 | Jun 25 | Improper bounds validation in EmberZNet SDK |
| CVE-2026-47154 | EM EmberZNet Silicon Labs | 6.5 | Jun 25 | Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2 |
| CVE-2026-47153 | EM EmberZNet Silicon Labs | 6.5 | Jun 25 | Level Control Step With On/Off divide-by-zero in EmberZNet v9.0.2 |
| CVE-2026-47152 | EM EmberZNet Silicon Labs | 6.5 | Jun 25 | Level Control Move divide-by-zero in EmberZNet v9.0.2 |
| CVE-2026-47151 | EM EmberZNet Silicon Labs | 7.1 | Jun 25 | Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2 |
| CVE-2026-47150 | EM EmberZNet Silicon Labs | 7.1 | Jun 25 | IAS Zone enroll invalid table index and write in EmberZNet 9.0.2 |
| CVE-2026-47149 | EM EmberZNet Silicon Labs | 6.5 | Jun 25 | Door Lock GetUserType invalid table index in EmberZNet v9.0.2 |
| CVE-2026-47148 | EM EmberZNet Silicon Labs | 6.5 | Jun 25 | Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2 |
| CVE-2026-47147 | EM EmberZNet Silicon Labs | 7.1 | Jun 25 | OTA server raw parser missing per-field bounds validation in EmberZNet v9.0.2 |
| CVE-2026-47146 | EM EmberZNet Silicon Labs | 6.5 | Jun 25 | Color Control color-temperature assertion abort in EmberZNet v9.0.2 |
| CVE-2026-47145 | EM EmberZNet Silicon Labs | 6.5 | Jun 25 | Color Control hue/saturation assertion abort in EmberZNet v9.0.2 |
| CVE-2026-4526 | EM EmberZNet Silicon Labs | 6.5 | Jun 25 | Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2 |
| CVE-2026-2815 | SI SiSDK Silicon Labs | 8.4 | Jun 25 | Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keys |
| CVE-2026-3290 | RS RS9116 SDK Silicon Labs | 7.4 | May 14 | Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values |
| CVE-2025-2838 | GO Gecko OS Silicon Labs | 6.5 | Mar 26 | Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability |
| CVE-2025-2837 | GO Gecko OS Silicon Labs | 8.8 | Mar 26 | Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2024-9055 | SS Simplicity SDK Silicon Labs | 4.2 | Mar 17 | DPA Countermeasures need reseeding |
| CVE-2024-12975 | SS Simplicity SDK Silicon Labs | 1.0 | Mar 7 | Silicon Labs CPC can leak information in full duplex SPI |
| CVE-2024-23937 | GO Gecko OS Silicon Labs | 4.3 | Jan 31 | Silicon Labs Gecko OS Debug Interface Format String |
| CVE-2024-23973 | GO Gecko OS Silicon Labs | 8.8 | Jan 30 | Silicon Labs Gecko OS HTTP GET Request Handling Stack-based Buffer Overflow |
| CVE-2024-24731 | GO Gecko OS Silicon Labs | 8.8 | Jan 30 | Silicon Labs Gecko OS http_download Stack-based Buffer Overflow |
| CVE-2024-23938 | GO Gecko OS Silicon Labs | 8.8 | Sep 28 | Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2023-41093 | SS Simplicity SDK Silicon Labs | 3.1 | Jul 12 | Loss of confidentiality due to potential race condition in Bluetooth controller Connection_Handle reuse |