CVE-2025-14055: Silabs.com Simplicity Sdk, Gecko SDK

Low severity, CVSS 2.4. EPSS: 0.2% chance of exploitation in the next 30 days.

An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a specially crafted packet.

Affected products

• Silabs.com Simplicity Sdk, Gecko SDK: from 2025.12.0, up to and including 2025.12.1; up to and including 2025.6.2

Published 2026-02-20. Last modified 2026-06-17.