Semtech

7 CVEs across 10 Semtech products. Browse Semtech vulnerabilities, severities, and proof-of-concept exploits.

Semtech products with known CVEs

ProductCVEs
Lr11103
Lr11203
Lr11213
Loramac-Node2
Lora Basics Station1
Lr1110 Modem-E1
Lr1110 Transceiver1
Lr1120 Transceiver1
Lr1121 Modem-E1
Lr1121 Transceiver1
Semtech CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-62322026-10-12An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversi…
CVE-2025-148592026-04-07The Semtech LR11xx LoRa transceivers implement secure boot functionality using digital signatures to authenticate firmware. However, the implementation uses a…
CVE-2025-148582026-04-07The Semtech LR11xx LoRa transceivers running early versions of firmware contains an information disclosure vulnerability in its firmware validation functionali…
CVE-2025-148572026-04-07An improper access control vulnerability exists in Semtech LoRa LR11xxx transceivers running early versions of firmware where the memory write command accessib…
CVE-2022-39274High7.52022-10-06LoRaMac-node is a reference implementation and documentation of a LoRa network node. Versions of LoRaMac-node prior to 4.7.0 are vulnerable to a buffer overflo…
CVE-2020-11068Medium5.02020-06-23In LoRaMac-node before 4.4.4, a reception buffer overflow can happen due to the received buffer size not being checked. This has been fixed in 4.4.4.
CVE-2020-4060Medium4.12020-06-22In LoRa Basics Station before 2.0.4, there is a Use After Free vulnerability that leads to memory corruption. This bug is triggered on 32-bit machines when the…