Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-2329 EUVD-2025-22722GHSA-q46p-vh9h-4p2c

High traffic causes corrupt SPI packets in OpenThread leading to denial of service

Published Jul 25, 2025 · Updated Aug 4, 2025 · Assigned by Silabs

Description

In high traffic environments, a Silicon Labs OpenThread RCP (see impacted versions) fails to clear the SPI transmit buffer and may send a corrupt packet over SPI to its host,  causing the host to reset the RCP which results in a denial of service.

Affected products

VendorProductAffectedFixed
silabs.com OpenThread 2.5.0 – ≤ 2.5.2, 2.6.0 – ≤ 2.6.2, ≤ 2.4.6 —

References