Skip to content
OpenAdvisories
High · 7.5 CVE-2024-8361 EUVD-2024-49626GHSA-p3r2-35xm-8q7v

DoS caused due to wrong hash length returned for SHA2/224 algorithm

Published Jan 7, 2025 · Updated Sep 16, 2025 · Assigned by Silabs

Description

In SiWx91x devices, the SHA2/224 algorithm returns a hash of 256 bits instead of 224 bits. This incorrect hash length triggers a software assertion, which subsequently causes a Denial of Service (DoS).
If a watchdog is implemented, device will restart after watch dog expires. If watchdog is not implemented, device can be recovered only after a hard reset

Affected products

VendorProductAffectedFixed
silabs.com WiSeConnect SDK ≤ 3.3.4 —

References