Silicon Labs
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| EmberZNet | 17 | – | Oct 22, 2026 |
| Gecko Platform | 9 | – | Feb 20, 2024 |
| Gecko OS | 6 | – | Mar 26, 2025 |
| Z/IP Gateway | 4 | – | Jun 21, 2023 |
| 500 series | 4 | – | Jan 7, 2022 |
| Z-Wave SDK | 4 | – | Oct 22, 2026 |
| silabser.sys driver | 3 | – | Sep 10, 2026 |
| Simplicity SDK | 3 | – | Mar 17, 2025 |
| UZB-7 | 2 | – | Jan 9, 2022 |
| Ember ZNet | 2 | – | Oct 4, 2023 |
| SiSDK | 2 | – | Aug 27, 2026 |
| RS9116 SDK | 1 | – | May 14, 2026 |
| Silicon Labs Matter Github | 1 | – | Jul 23, 2026 |
| Unify Gateway | 1 | – | Jun 21, 2023 |
| WF200 FW | 1 | – | Nov 5, 2026 |
| 100 series | 1 | – | Jan 7, 2022 |
| Connect SDK | 1 | – | Oct 22, 2026 |
| BT Mesh SDK | 1 | – | Aug 27, 2026 |
| 700 series | 1 | – | Jan 7, 2022 |
| Gecko Bootloader | 1 | – | Aug 23, 2023 |
| 300 series | 1 | – | Jan 7, 2022 |
| 200 series | 1 | – | Jan 7, 2022 |
Exploited and recent CVEs
- CVE-2026-107359 Malformed Wi-Fi Beacon Causes Crash on WF200 0.2%
- CVE-2026-89410 Out-of-bounds read in Z-Wave NCP SPI Handler 0.2%
- CVE-2026-89409 Unvalidated ZWAVE_CMD_NODES_EXIST May Cause Deletion of End Nodes 0.3%
- CVE-2026-85079 Out-of-bounds write in Zigbee Simple_Desc_req handling 0.7%
- CVE-2026-94502 Out-of-bounds write in Zigbee Publish Price Matrix handling 0.7%
- CVE-2026-66282 Authenticated Denial-of-Service in Zigbee Publish Billing Period 0.3%
- CVE-2026-66281 Authenticated Denial-of-Service in Zigbee Discover Attributes Handling 0.3%
- CVE-2026-85080 Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling 0.5%
- CVE-2026-66279 Dis-connect vulnerability in Connect Stack 0.2%
- CVE-2026-15419 CP210x Driver Memory Corruption results in Arbitrary Code Execution 0.2%
- CVE-2026-15418 CP210x Memory Leakage 0.2%
- CVE-2026-15417 CP210x Denial of Service 0.2%
- CVE-2026-17610 RAIL 802.15.4 Mux missing ACK can lead to DoS 0.3%
- CVE-2026-5706 Buffer overflow in Bluetooth Mesh SDK when handling extended advertisements 0.4%
- CVE-2026-6924 Weak entropy initialization in Silicon Labs Matter SiWx917 TinyCrypt path 0.4%
- CVE-2026-6432 Improper bounds validation in EmberZNet SDK 0.6%
- CVE-2026-47154 Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2 0.4%
- CVE-2026-47153 Level Control Step With On/Off divide-by-zero in EmberZNet v9.0.2 0.4%
- CVE-2026-47152 Level Control Move divide-by-zero in EmberZNet v9.0.2 0.4%
- CVE-2026-47151 Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2 0.4%
- CVE-2026-47150 IAS Zone enroll invalid table index and write in EmberZNet 9.0.2 0.4%
- CVE-2026-47149 Door Lock GetUserType invalid table index in EmberZNet v9.0.2 0.4%
- CVE-2026-47148 Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2 0.4%
- CVE-2026-47147 OTA server raw parser missing per-field bounds validation in EmberZNet v9.0.2 0.4%
- CVE-2026-47146 Color Control color-temperature assertion abort in EmberZNet v9.0.2 0.4%
- CVE-2026-47145 Color Control hue/saturation assertion abort in EmberZNet v9.0.2 0.4%
- CVE-2026-4526 Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2 0.4%
- CVE-2026-2815 Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keys 0.3%
- CVE-2026-3290 Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values 0.2%
- CVE-2025-2838 Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability 0.3%