CVE-2025-3873
Buffer overflow in Si91x crypto APIs
- State
- Published
- Severity
- 6.0 Medium
- Published
- Jul 25, 2025
- Updated
- Jul 25, 2025
- Reserved
- Apr 22, 2025
Description
The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host (Cortex-M4) application.
sl_si91x_aes sl_si91x_gcm sl_si91x_ccm sl_si91x_sha
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.0 Medium | CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N | Silabs |
Weaknesses
- CWE-787 Out-of-bounds Write
Affected Products
| Product | Versions |
|---|---|
WiseConnectsilabs.com |
|
References
- https://docs.silabs.com/wiseconnect/latest/sisdk-wifi-release-notes/release-notes
- https://community.silabs.com/068Vm00000SSlOuvendor-advisorypermissions-required
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.