CVEvulnerability
CVE-2025-3873
6.0 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2025-07-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 6.0 MEDIUM — CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Weaknesses
- CWE-787
Description
The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host (Cortex-M4) application.
sl_si91x_aes
sl_si91x_gcm
sl_si91x_ccm
sl_si91x_sha
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://community.silabs.com/068Vm00000SSlOu community.silabs.com
- https://docs.silabs.com/wiseconnect/latest/sisdk-wifi-release-notes/ docs.silabs.com