PT-2025-30882 · Silicon · Siwx91X

Published 2025-07-25 · Updated 2025-07-26 · CVE-2025-3873

Positive Technologies (AI Summary)

CVSS v4.0

6.0

Medium

Base vector

AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Silicon Labs SiWx91x versions prior to 3.4.0

Description The APIs sl si91x aes, sl si91x gcm, sl si91x ccm, and sl si91x sha did not validate the size of the output buffer provided by the caller. This could result in data corruption on the host (Cortex-M4) application.

Recommendations Update to version 3.4.0 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-3873

Affected Products

Siwx91X

References · 5

• https://community.silabs.com/068Vm00000SSlOu · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-3873 · Security Note
• https://twitter.com/CVEnew/status/1948782089824018698 · Twitter Post
• https://docs.silabs.com/wiseconnect/latest/sisdk-wifi-release-notes · Note
• https://twitter.com/VulmonFeeds/status/1948918135735673036 · Twitter Post