CVE-2023-25181

CRITICAL

Silabs Gecko Software Development Kit - Out-of-Bounds Write

Title source: rule
STIX 2.1

Description

A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted set of network packets can lead to arbitrary code execution. An attacker can send a malicious packet to trigger this vulnerability.

References (2)

Core 2
Core References
Exploit, Technical Description, Third Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1726

Scores

CVSS v3 9.0
EPSS 0.0030
EPSS Percentile 53.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-122 CWE-787
Status published
Products (3)
silabs/gecko_software_development_kit 4.3.1
weston-embedded/cesium_net 3.07.01
weston-embedded/uc-http 3.01.01
Published Nov 14, 2023
Tracked Since Feb 18, 2026