Threats affecting pkg:github/SiSDK

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.1	EPSS 0.1%	CVE-2025-14972silabs.com Simplicity SDK · Insufficient Entropy Medium4.1EPSS 0.1%2026-05-15CVE Database V5CVE-2025-14972 * Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually repeat. * KSU keys using SYMCRYPTO will be impacted by this vulnerability. EPSS 0.1%Vulnerability CWE-331	CVE Database V5	2026-05-15
Low	2.3	EPSS 0.3%	CVE-2025-14547silabs.com Simplicity SDK · Integer Underflow Low2.3EPSS 0.3%2026-02-20CVE Database V5CVE-2025-14547 An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service. EPSS 0.3%Vulnerability CWE-191	CVE Database V5	2026-02-20
Critical	9.2	EPSS 0.3%	CVE-2025-7964silabs.com Silicon Labs Zigbee Stack · Improper Handling of Values Critical9.2EPSS 0.3%2026-01-30CVE Database V5CVE-2025-7964 After receiving a malformed 802.15.4 MAC Data Request the Zigbee Coordinator sends a ‘network leave’ request to Zigbee router resulting in the Zigbee Router getting stuck in a non-rejoinable state. If a suitable parent is not available, the end devices will be unable to rejoin. A manual recommissioning is required to recover the Zigbee Router. EPSS 0.3%Vulnerability CWE-229	CVE Database V5	2026-01-30

Page 1 of 1