Low · 2.3 CVE-2025-14547 EUVD-2025-207676GHSA-7cp9-3m8m-4jv3

ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs

Published Feb 20, 2026 · Updated Feb 20, 2026 · Assigned by Silabs

Vendor: silabs.com Product: Gecko SDK Product: Simplicity SDK

Description

An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.

Affected products

Vendor	Product	Affected	Fixed
silabs.com	Simplicity SDK	≤ 2025.6.2	—
silabs.com	Gecko SDK	≤ 2.5.x	—

References

https://community.silabs.com/068Vm00000e1UTF vendor-advisory permissions-required