silabs Vulnerability Advisory Catalog

Total 94 security vulnerabilities recorded for silabs software and firmware.

← Back to All Vendors
CVE-2026-4526 MEDIUM
Component: emberznet

In EmberZNet v9.0.2 and earlier, malformed global ZCL messages can trigger out-of-bounds reads in framework parsing logic and terminate the process. T...

📅 2026-06-25
CVSS 6.5 Dossier →
Component: emberznet

In EmberZNet v9.0.2 and earlier, a malformed GetProfileResponse message can trigger out-of-bounds reads while iterating interval entries and terminate...

📅 2026-06-25
CVSS 6.5 Dossier →
Component: emberznet

In EmberZNet v9.0.2 and earlier, a malformed Level Control Step command can terminate the process through a divide-by-zero fault. This command must co...

📅 2026-06-25
CVSS 6.5 Dossier →
Component: emberznet

In EmberZNet v9.0.2 and earlier, a malformed Level Control Move command can terminate the process through a divide-by-zero fault. This command must co...

📅 2026-06-25
CVSS 6.5 Dossier →
Component: emberznet

In EmberZNet v9.0.2 and earlier, malformed ClearWeekdaySchedule messages can trigger out-of-bounds writes into Door Lock schedule state. The size and ...

📅 2026-06-25
CVSS 7.1 Dossier →
Component: emberznet

In EmberZNet v9.0.2 and earlier, malformed IAS Zone enrollment messages can trigger an out-of-bounds state-table write and terminate the process. The ...

📅 2026-06-25
CVSS 7.1 Dossier →
Component: emberznet

In EmberZNet v9.0.2 and earlier, malformed or out-of-range Door Lock user identifiers can trigger out-of-bounds table reads and terminate the process....

📅 2026-06-25
CVSS 6.5 Dossier →
Component: emberznet

In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigger repeated reads past the end of the message payload and terminate th...

📅 2026-06-25
CVSS 6.5 Dossier →
Component: emberznet

In EmberZNet v9.0.2 and earlier, malformed OTA requests can drive the OTA server parser into out-of-bounds reads. A limited amount of data from RAM is...

📅 2026-06-25
CVSS 7.1 Dossier →
Component: emberznet

In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process. These messages must come from a devi...

📅 2026-06-25
CVSS 6.5 Dossier →
Component: emberznet

In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process. These messages must come from a devi...

📅 2026-06-25
CVSS 6.5 Dossier →
Component: simplicity_software_development_kit

A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service....

📅 2026-02-05
CVSS 6.5 Dossier →
CVE-2025-2838 MEDIUM
Component: gecko_os

Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to c...

📅 2025-03-26
CVSS 6.5 Dossier →
Component: gecko_os

Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacen...

📅 2025-03-26
CVSS 8.8 Dossier →
Component: gecko_os

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is n...

📅 2025-01-31
CVSS 7.5 Dossier →
Component: gecko_os

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is n...

📅 2025-01-31
CVSS 8.8 Dossier →
Component: gecko_os

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Silicon Labs Gecko OS. Authenticat...

📅 2025-01-31
CVSS 4.3 Dossier →
Component: z-wave_software_development_kit

Silicon Labs Z-Wave Series 500 v6.84.0 was discovered to contain insecure permissions....

📅 2024-12-10
CVSS 4.6 Dossier →
Component: z-wave_software_development_kit

An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code....

📅 2024-12-10
CVSS 8.8 Dossier →
Component: z-wave_software_development_kit

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to arbitrarily change the device type in the controlle...

📅 2024-12-10
CVSS 6.2 Dossier →
Component: z-wave_software_development_kit

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the wakeup interval of end devices in contro...

📅 2024-12-10
CVSS 6.5 Dossier →
Component: z-wave_software_development_kit

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller...

📅 2024-12-10
CVSS 6.5 Dossier →
Component: z-wave_software_development_kit

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause a Denial of Service (DoS) via repeatedly send...

📅 2024-12-10
CVSS 6.5 Dossier →
Component: z-wave_software_development_kit

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets....

📅 2024-12-10
CVSS 8.8 Dossier →
Page 1 of 4 (94 Total Records)