CVE-2025-3873

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-3873

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-3873.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-3873

Published

2025-07-25T15:46:02Z

Modified

2026-08-12T03:51:17Z

Severity

6.0 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Buffer overflow in Si91x crypto APIs

Details

The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host (Cortex-M4) application.

sl_si91x_aes sl_si91x_gcm sl_si91x_ccm sl_si91x_sha

Database specific

{
    "cna_assigner": "Silabs",
    "cwe_ids": [
        "CWE-787"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/3xxx/CVE-2025-3873.json"
}

References

Affected packages

Git / github.com/siliconlabs/wiseconnect

Affected ranges

Type

GIT

Repo

https://github.com/siliconlabs/wiseconnect

Events

Introduced

Fixed

68e44ea22070bb0e594b9974047aed687538aca7

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "3.0.0"
        },
        {
            "fixed": "3.4.0"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

v3.*

v3.0.10

v3.0.12

v3.0.13

v3.0.9

v3.1.0

v3.1.1

v3.1.1-Doc

v3.1.2

v3.1.3

v3.1.4

v3.2.0

v3.3.0

v3.3.1

v3.3.2

v3.3.3

v3.3.4

v3.4.0-rc3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-3873.json"