silabs.com

Products

ProductCVEsExploitedLatest
GSDK12–Feb 21, 2024
Gecko Platform10–Jun 15, 2023
WiseConnect7–Aug 13, 2026
Gecko SDK7–Feb 20, 2026
Simplicity SDK7–Jun 25, 2026
Ember ZNet SDK6–Jan 9, 2025
BT1223–Aug 13, 2026
RS9116 Bluetooth SDK3–Dec 19, 2024
SiSDK3–Jan 28, 2025
Z/IP Gateway SDK3–Apr 26, 2024
PC Controller2–Feb 21, 2024
Gecko Bootloader2–Jul 28, 2023
Ember ZNet2–Nov 17, 2022
Silicon Labs IDE (8-bit)1–Jan 24, 2025
Silicon Labs Matter1–Feb 12, 2026
Silicon Labs Z-Wave SDK1–Oct 31, 2025
Silicon Labs Zigbee Stack1–Jan 30, 2026
Simplicity Device Manager1–Feb 10, 2026
Simplicity Installer tool (Silicon Labs Tool - SLT) for Simplicity Studio v61–Mar 24, 2026
Simplicity SDK, Gecko SDK1–Feb 20, 2026
Simplicity Studio v51–Mar 24, 2026
Simplicity Studio V61–Dec 4, 2025
ToolStick1–Jan 24, 2025
USBXpress 4 SDK1–Jan 24, 2025
USBXpress Dev Kit1–Jan 24, 2025
USBXpress SDK1–Jan 24, 2025
USBXpress Win 98SE Dev Kit1–Jan 24, 2025
Wi-SUN Linux Border Router1–Mar 21, 2023
Wi-SUN SDK1–Mar 21, 2023
Wi-SUN Stack1–Sep 12, 2025
Bluetooth SDK1–Jun 15, 2023
WiSeConnect SDK1–Jan 7, 2025
Z-Wave Protocol Controller1–Jan 5, 2026
Zigbee1–Jul 30, 2025
Zigbee Stack1–Jul 30, 2025
WiseCnnect1–Sep 8, 2026
Configuration Wizard 21–Jan 24, 2025
CP210 VCP Win 2k1–Jan 24, 2025
CP210x VCP Windows1–Jan 24, 2025
EFR32 BLE SDK1–Oct 11, 2024
EmberZNet1–Jan 15, 2025
EmberZNet SDK1–Feb 5, 2026
Flash Programming Utility1–Jan 24, 2025
OpenThread1–Jul 25, 2025
OpenThread SDK1–Oct 26, 2023
RS9116W1–Nov 17, 2025
SE Firmware1–Aug 29, 2024
Series 2 SoCs and associated modules1–Apr 29, 2025

Exploited and recent CVEs

  • CVE-2026-16769 High 7.1 RS9116W/SiWx917 plaintext pause encryption request causes DOS 0.1%
  • CVE-2026-65936 Medium 5.3 RS9116W/SiWx917 malformed packet with increased length field causes memory leak 0.3%
  • CVE-2026-65935 High 7.6 Bypassing passkey entry in legacy pairing 0.3%
  • CVE-2026-65934 High 7.1 BT122 plaintext pause encryption request causes DOS 0.1%
  • CVE-2026-65933 Medium 5.3 BT122 malformed packet with increased length field causes memory leak 0.3%
  • CVE-2026-65932 Medium 5.3 BT122 stops advertising 0.3%
  • CVE-2026-19293 High 8.8 SMP security request 0.2%
  • CVE-2026-19292 High 8.8 Bluetooth re-pairing with legitimate device can use lower security level 0.4%
  • CVE-2026-19291 High 8.8 Bluetooth re-pairing can use a lower security level than previous 0.4%
  • CVE-2026-16101 High 8.8 forced re-pairing with already bonded device 0.4%
  • CVE-2026-4930 High 7.1 DPA Countermeasures weakening on Series 3 devices 0.1%
  • CVE-2026-8676 High 8.8 An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond. 0.2%
  • CVE-2025-14972 Medium 4.1 Insufficient DPA countermeasure reseeding 0.1%
  • CVE-2025-11571 Low 2.1 Command Execution vulnerability in Simplicity Installer 0.4%
  • CVE-2025-11571 Low 2.1 Command Execution vulnerability in Simplicity Installer 0.4%
  • CVE-2025-14055 Low 2.4 Integer underflow in Secure NCP host 0.2%
  • CVE-2025-14547 Low 2.3 ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs 0.3%
  • CVE-2025-14547 Low 2.3 ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs 0.3%
  • CVE-2026-0619 Medium 6.0 Integer Wraparound DoS in Silicon Labs Matter Implementation 0.4%
  • CVE-2025-11004 High 7.5 Reflected XSS vulnerability in Simplicity Device Manager tool 0.3%
  • CVE-2025-7432 Low 1.0 DPA countermeasures not reseeded under certain conditions 0.2%
  • CVE-2025-12131 Medium 5.3 Truncated 802.15.4 packet leads to denial of service 0.2%
  • CVE-2025-7964 Critical 9.2 Zigbee Router Denial of Service 0.3%
  • CVE-2025-10933 Medium 5.3 Silicon Labs Z-Wave Protocol Controller Integer underflow vulnerability leads to out of bounds read 0.3%
  • CVE-2025-12986 Medium 6.0 Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devices 0.2%
  • CVE-2025-10285 High 7.4 Simplcity Device Manager exposes NTLMv2 hash 0.2%
  • CVE-2025-4321 High 7.1 DoS in RS9116W-WiSeConnect L2CAP protocol due to reception of malformed packets 0.2%
  • CVE-2025-10693 High 7.6 Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure 0.3%
  • CVE-2025-8414 Critical 9.4 Zigbee Green Power Host Buffer Overflow Vulnerability 0.3%
  • CVE-2025-8414 Critical 9.4 Zigbee Green Power Host Buffer Overflow Vulnerability 0.3%