Low severity · published Mar 7, 2025
CVE-2024-12975
Silicon Labs CPC can leak information in full duplex SPI
1.0
CVSS
0.2%
EPSS
No
On KEV
Description
A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 10% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Simplicity SDK · Silicon Labs
before 2024.12.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-12975
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-12975
community.silabs.com
https://community.silabs.com/069Vm00000LWXMeIAP
github.com
https://github.com/SiliconLabs/simplicity_sdk/releases
More from Simplicity SDK
4.2
CVE-2024-9055
DPA Countermeasures need reseeding
3.1
CVE-2023-41093
Loss of confidentiality due to potential race condition in Bluetooth controller Connection_Handle reuse