CVE-2023-25181: Silabs Gecko Software Development Kit

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted set of network packets can lead to arbitrary code execution. An attacker can send a malicious packet to trigger this vulnerability.

Affected products

• Silabs Gecko Software Development Kit: version 4.3.1 only
• Weston-Embedded Cesium Net: version 3.07.01 only
• Weston-Embedded Uc-HTTP: version 3.01.01 only

Published 2023-11-14. Last modified 2026-06-17.