CVE-2025-3873

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-3873

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-3873.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-3873

Published

2025-07-25T15:46:02.258Z

Modified

2026-07-15T01:48:53.804708138Z

Severity

6.0 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Buffer overflow in Si91x crypto APIs

Details

The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host (Cortex-M4) application.

slsi91xaes slsi91xgcm slsi91xccm slsi91xsha

Database specific

{
    "cna_assigner": "Silabs",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/3xxx/CVE-2025-3873.json",
    "cwe_ids": [
        "CWE-787"
    ]
}

References

Affected packages

Git / github.com/siliconlabs/wiseconnect

Affected ranges

Type

GIT

Repo

https://github.com/siliconlabs/wiseconnect

Events

Introduced

Fixed

68e44ea22070bb0e594b9974047aed687538aca7

Database specific

{
    "extracted_events": [
        {
            "introduced": "3.0.0"
        },
        {
            "fixed": "3.4.0"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

v3.*

v3.0.10

v3.0.12

v3.0.13

v3.0.9

v3.1.0

v3.1.1

v3.1.1-Doc

v3.1.2

v3.1.3

v3.1.4

v3.2.0

v3.3.0

v3.3.1

v3.3.2

v3.3.3

v3.3.4

v3.4.0-rc3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-3873.json"