Skip to content
CVE PROGRAM SOURCE RECORD2.3 Low

CVE-2025-14547

ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs

Description

An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

silabs.com Simplicity SDK

Default version status: unaffected

  • 0 to ≤ 2025.6.2affected

silabs.com Gecko SDK

Default version status: affected

  • 0 to ≤ 2.5.xaffected

References