PT-2026-21018 · Silicon · Secure Ncp

Published 2026-02-20 · Updated 2026-02-23 · CVE-2025-14055

Positive Technologies (AI Summary)

CVSS v4.0

2.4

Low

Base vector

AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Silicon Labs Secure NCP versions (affected versions not specified)

Description An integer underflow in the Silicon Labs Secure NCP host implementation can lead to a buffer overread when processing a crafted packet.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Integer Underflow

Weakness Enumeration

CWE-125

CWE-191

Related Identifiers

CVE-2025-14055

Affected Products

Secure Ncp

References · 4

• https://community.silabs.com/068Vm00000gvJlq · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14055 · Security Note
• https://twitter.com/CVEnew/status/2025809076765213052 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2024878513958822131 · Twitter Post