PT-2025-30882 · Silicon · Siwx91X

CVE-2025-3873 · Publicado 2025-07-25 · Atualizado 2025-07-26

Positive Technologies (AI Summary)

CVSS v4.0

6.0

Média

Vetor base

AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Silicon Labs SiWx91x versions prior to 3.4.0

Description The APIs sl si91x aes, sl si91x gcm, sl si91x ccm, and sl si91x sha did not validate the size of the output buffer provided by the caller. This could result in data corruption on the host (Cortex-M4) application.

Recommendations Update to version 3.4.0 or later.

Exploit

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2025-3873

Produtos afetados

Siwx91X

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/3xxx/CVE-2025-3873.json · Exploit
• https://github.com/SiliconLabs/wiseconnect · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-3873 · Nota de Segurança
• https://twitter.com/CVEnew/status/1948782089824018698 · Publicação no Twitter
• https://docs.silabs.com/wiseconnect/latest/sisdk-wifi-release-notes · Nota
• https://twitter.com/VulmonFeeds/status/1948918135735673036 · Publicação no Twitter
• https://community.silabs.com/068Vm00000SSlOu · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-3873 · Aviso do Fabricante