{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-3873","assignerOrgId":"030b2754-1501-44a4-bef8-48be86a33bf4","state":"PUBLISHED","assignerShortName":"Silabs","dateReserved":"2025-04-22T15:48:02.536Z","datePublished":"2025-07-25T15:46:02.258Z","dateUpdated":"2025-07-25T18:32:06.955Z"},"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","packageName":"SiSDK","product":"WiseConnect","repo":"https://github.com/SiliconLabs/wiseconnect","vendor":"silabs.com","versions":[{"lessThan":"3.4.0","status":"affected","version":"3.0.0","versionType":"semver"}]}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host (Cortex-M4) application.<br>\n\n<span style=\"background-color: rgb(255, 255, 255);\">sl_si91x_aes<br>sl_si91x_gcm<br>sl_si91x_ccm <br>sl_si91x_sha</span>\n\n<br>"}],"value":"The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host (Cortex-M4) application.\n\n\nsl_si91x_aes\nsl_si91x_gcm\nsl_si91x_ccm \nsl_si91x_sha"}],"impacts":[{"capecId":"CAPEC-100","descriptions":[{"lang":"en","value":"CAPEC-100 Overflow Buffers"}]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":6,"baseSeverity":"MEDIUM","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write","lang":"en","type":"CWE"}]}],"providerMetadata":{"orgId":"030b2754-1501-44a4-bef8-48be86a33bf4","shortName":"Silabs","dateUpdated":"2025-07-25T15:46:02.258Z"},"references":[{"tags":["release-notes"],"url":"https://docs.silabs.com/wiseconnect/latest/sisdk-wifi-release-notes/"},{"tags":["vendor-advisory","permissions-required"],"url":"https://community.silabs.com/068Vm00000SSlOu"}],"source":{"discovery":"UNKNOWN"},"title":"Buffer overflow in Si91x crypto APIs","x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-07-25T18:31:45.896050Z","id":"CVE-2025-3873","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-07-25T18:32:06.955Z"}}]}}