PT-2026-21018 · Silicon · Secure Ncp

CVE-2025-14055 · Publicado 2026-02-20 · Atualizado 2026-02-23

Positive Technologies (AI Summary)

CVSS v4.0

2.4

Baixa

Vetor base

AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Silicon Labs Secure NCP versions (affected versions not specified)

Description An integer underflow in the Silicon Labs Secure NCP host implementation can lead to a buffer overread when processing a crafted packet.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Integer Underflow

Enumeração de Fraquezas

CWE-125

CWE-191

Identificadores relacionados

CVE-2025-14055

Produtos afetados

Secure Ncp

Referências · 4

• https://twitter.com/CVEnew/status/2025809076765213052 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2024878513958822131 · Publicação no Twitter
• https://community.silabs.com/068Vm00000gvJlq · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-14055 · Nota de Segurança