CVE-2025-14547 — ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs

CVE-2025-14547

ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs PUBLISHED

Description (CNA)

An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.

Affected (CNA)

Vendor / product	Versions
silabs.com / Simplicity SDK	affected 0 through 2025.6.2
silabs.com / Gecko SDK	affected 0 through 2.5.x

CWE

CWE-191

References

https://community.silabs.com/068Vm00000e1UTF

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.