Integer overflow in Silabs.com Gecko Sdk

CVE-2025-14547

An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.

EPSS: 0.001 (21.9th percentile) — read the EPSS interpretation.

Affected products

Silabs.com Gecko Sdk — versions 0
Silabs.com Simplicity Sdk — versions 0

Weakness classification (CWE)

CWE-191 — Integer Underflow

References

community.silabs.com/068Vm00000e1UTF (vendor-advisory, permissions-required)