Medium severity · published Jan 5, 2026
CVE-2025-10933
Silicon Labs Z-Wave Protocol Controller Integer underflow vulnerability leads to out of bounds read
5.3
CVSS
0.3%
EPSS
No
On KEV
Description
An integer underflow vulnerability in the Silicon Labs Z-Wave Protocol Controller can lead to out of bounds memory reads.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 19% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZP
Z-Wave Protocol Controller · silabs.com
before 1.7.1 · source: vendor