Skip to content
OpenAdvisories
Low · 2.4 CVE-2025-14055 EUVD-2025-207677GHSA-2m3f-m6mg-cvqf

Integer underflow in Secure NCP host

Published Feb 20, 2026 · Updated Apr 24, 2026 · Assigned by Silabs

Vendor: silabs.com Product: Simplicity SDK, Gecko SDK

Description

An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a specially crafted packet.

Affected products

VendorProductAffectedFixed
silabs.com Simplicity SDK, Gecko SDK 2025.12.0 – ≤ 2025.12.1, ≤ 2025.6.2 —

References