Vulnerability · Published Feb 20, 2026 · Assigned by Silabs
CVE-2025-14055Integer underflow in Secure NCP host
Low 2.4
In plain English
A low-severity out-of-bounds read in Simplicity SDK, Gecko SDK from silabs.com. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).
Severity (CVSS 4.0)2.4Low
Exploit odds (30 days)0.2%top 90.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a specially crafted packet.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| silabs.com | Simplicity SDK, Gecko SDK | 2025.12.0 – through 2025.12.10 – through 2025.6.2 |
Weakness: CWE-191, CWE-125 · Vector: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
References
- https://community.silabs.com/068Vm00000gvJlq vendor-advisory, permissions-required