{"id":"CVE-2025-3873","state":"PUBLISHED","title":"Buffer overflow in Si91x crypto APIs","description":"The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host (Cortex-M4) application.\n\n\nsl_si91x_aes\nsl_si91x_gcm\nsl_si91x_ccm \nsl_si91x_sha","publishedAt":"2025-07-25T15:46:02.258Z","updatedAt":"2025-07-25T18:32:06.955Z","severity":{"score":6,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","source":"Silabs"},"assigner":"Silabs","products":["silabs.com WiseConnect"],"affected":[{"vendor":"silabs.com","product":"WiseConnect","packageName":"SiSDK","defaultStatus":"unaffected","versions":[{"version":"3.0.0","status":"affected","lessThan":"3.4.0","versionType":"semver"}],"repo":"https://github.com/SiliconLabs/wiseconnect"}],"references":["https://docs.silabs.com/wiseconnect/latest/sisdk-wifi-release-notes/","https://community.silabs.com/068Vm00000SSlOu"],"weaknesses":["CWE-787"],"ingestedAt":"2026-10-29T20:09:09.358Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/3xxx/CVE-2025-3873.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-3873","state":"PUBLISHED","datePublished":"2025-07-25T15:46:02.258Z","dateUpdated":"2025-07-25T18:32:06.955Z","assignerShortName":"Silabs","assignerOrgId":"030b2754-1501-44a4-bef8-48be86a33bf4","dateReserved":"2025-04-22T15:48:02.536Z"},"containers":{"cna":{"title":"Buffer overflow in Si91x crypto APIs","descriptions":[{"lang":"en","value":"The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host (Cortex-M4) application.\n\n\nsl_si91x_aes\nsl_si91x_gcm\nsl_si91x_ccm \nsl_si91x_sha"}],"affected":[{"vendor":"silabs.com","product":"WiseConnect","packageName":"SiSDK","defaultStatus":"unaffected","versions":[{"version":"3.0.0","status":"affected","lessThan":"3.4.0","versionType":"semver"}],"repo":"https://github.com/SiliconLabs/wiseconnect"}],"references":[{"url":"https://docs.silabs.com/wiseconnect/latest/sisdk-wifi-release-notes/","tags":["release-notes"]},{"url":"https://community.silabs.com/068Vm00000SSlOu","tags":["vendor-advisory","permissions-required"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":6,"baseSeverity":"MEDIUM","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Silabs","orgId":"030b2754-1501-44a4-bef8-48be86a33bf4","dateUpdated":"2025-07-25T15:46:02.258Z"},"impacts":[{"capecId":"CAPEC-100","descriptions":[{"lang":"en","value":"CAPEC-100 Overflow Buffers"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-07-25T18:31:45.896050Z","id":"CVE-2025-3873","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-07-25T18:32:06.955Z"}}]}}}