Vulnerability in Silicon Labs Matter GitHub
CVE-2026-6924
A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same stream of numbers. This vulnerability was discovered after the impacted repository was already deprecated.
EPSS: 0.004 (37.3th percentile) — read the EPSS interpretation.
Affected products
- Silicon Labs Matter Github — versions 0
Weakness classification (CWE)
References
- product-security@silabs.com (patch)
- product-security@silabs.com (vendor-advisory, permissions-required)