Skip to content
OpenAdvisories
Medium · 6.0 CVE-2025-3873 EUVD-2025-22724GHSA-5f47-2v24-g377

Buffer overflow in Si91x crypto APIs

Published Jul 25, 2025 · Updated Jul 25, 2025 · Assigned by Silabs

Description

The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host (Cortex-M4) application.

sl_si91x_aes
sl_si91x_gcm
sl_si91x_ccm
sl_si91x_sha

Affected products

VendorProductAffectedFixed
silabs.com WiseConnect 3.0.0 – < 3.4.0 3.4.0

References