Out-of-bounds Read in Silabs.com Simplicity Sdk, Gecko Sdk
CVE-2025-14055
An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a specially crafted packet.
Vulnerability class: Buffer Overflow
EPSS: 0.002 (6.3th percentile) — read the EPSS interpretation.
Affected products
- Silabs.com Simplicity Sdk, Gecko Sdk — versions 2025.12.0, 0
Weakness classification (CWE)
References
- product-security@silabs.com (vendor-advisory, permissions-required)