Skip to content
OpenAdvisories

Vendor

Semtech

4 known vulnerabilities.

Semtech at a glance

Last 12 months
4
Critical · all time
0
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 3 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 1 vulnerability November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202610
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202630
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

LR1110 3 LR1120 3 LR1121 3 LR1110 Transceiver 1 LR1110 Modem-e 1 LR1120 Transceiver 1 LR1121 Transceiver 1 LR1121 Modem-e 1
All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 5.2
    CVE-2026-6232

    Out-of-bounds write in LR11xx Transceiver

    An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversized length field can cause the firmware to write up to 254 arbitrary bytes past the bounds of an int…

    Semtech LR1110 Modem-e LR1121 Transceiver LR1110 Transceiver
  • High 7.0
    CVE-2025-14859

    Semtech LR11xx Secure Boot Bypass

    The Semtech LR11xx LoRa transceivers implement secure boot functionality using digital signatures to authenticate firmware. However, the implementation uses a non-standard cryptographic hashing algorithm that is vulnerable to second preimage attacks. An attac…

    Semtech LR1120 LR1110 LR1121
  • Medium 5.1
    CVE-2025-14858

    Semtech LR11xx Encrypted Firmware Disclosure

    The Semtech LR11xx LoRa transceivers running early versions of firmware contains an information disclosure vulnerability in its firmware validation functionality. When a host issues a firmware validity check command via the SPI interface, the device decrypts …

    Semtech LR1110 LR1121 LR1120
  • Medium 5.4
    CVE-2025-14857 Public exploit

    Semtech LR11xx Memory Write Access Control Bypass

    An improper access control vulnerability exists in Semtech LoRa LR11xxx transceivers running early versions of firmware where the memory write command accessible via the physical SPI interface fails to enforce write protection on the program call stack. An at…

    Semtech LR1110 LR1121 LR1120