Vulnerability · Published Feb 20, 2026 · Assigned by Silabs
CVE-2025-14547ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs
Low 2.3
In plain English
A low-severity security flaw in Gecko SDK from silabs.com. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Severity (CVSS 4.0)2.3Low
Exploit odds (30 days)0.3%top 74.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| silabs.com | Simplicity SDK | 0 – through 2025.6.2 |
| silabs.com | Gecko SDK | 0 – through 2.5.x |
Weakness: CWE-191 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
References
- https://community.silabs.com/068Vm00000e1UTF vendor-advisory, permissions-required