Medium severity · published Jul 25, 2025
CVE-2025-3873
Buffer overflow in Si91x crypto APIs
6.0
CVSS
0.4%
EPSS
No
On KEV
Description
The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host (Cortex-M4) application.
sl_si91x_aes
sl_si91x_gcm
sl_si91x_ccm
sl_si91x_sha
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
WiseConnect · silabs.com
3.0.0 before 3.4.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-3873
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-3873
community.silabs.com
https://community.silabs.com/068Vm00000SSlOu
docs.silabs.com
https://docs.silabs.com/wiseconnect/latest/sisdk-wifi-release-notes/
More from WiseConnect
8.8
CVE-2026-19293
SMP security request
8.8
CVE-2026-19292
Bluetooth re-pairing with legitimate device can use lower security level
8.8
CVE-2026-19291
Bluetooth re-pairing can use a lower security level than previous
8.8
CVE-2026-16101
forced re-pairing with already bonded device
7.6
CVE-2026-65935
Bypassing passkey entry in legacy pairing