Back to Database
Status published
Low
CVE-2025-14055
Integer underflow in Secure NCP host
Vulnerability Description
An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a specially crafted packet.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-14055
Credits & Attribution
No credits recorded in the NVD database.
References
More from silabs.com
View All →CVE-2025-8414
Zigbee Green Power Host Buffer Overflow Vulnerability
Critical
9.4
CVE-2025-7964
Zigbee Router Denial of Service
Critical
9.2
CVE-2025-7448
Man in the middle (MitM) attack vulnerability in Wi-SUN library
High
8.6
CVE-2025-7432
DPA countermeasures not reseeded under certain conditions
Low
1
CVE-2025-4321
DoS in RS9116W-WiSeConnect L2CAP protocol due to reception of malformed packets
High
7.1
Affected Vendor
silabs.com
View all reports →Affected Software
Simplicity SDK, Gecko SDK
Vulnerable Versions:
2025.12.0, 0
Timeline
Official Publish:
February 20th, 2026
Last Modified:
April 24th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
MITRE ATT&CK TTPs
T1190
Exploit Public-Facing Application
Initial Access
T1574
Hijack Execution Flow
Privilege Escalation
T1059
Command and Scripting Interpreter
Execution
T1485
Data Destruction
Impact
T1499
Endpoint Denial of Service
Impact
T1213
Data from Information Repositories
Collection
T1003
OS Credential Dumping
Credential Access
T1552
Unsecured Credentials
Credential Access