Silicon Labs Simplicity SDK 802.15.4 Packet Processing Buffer Overflow Vulnerability Leading to Denial-of-Service

A buffer overflow vulnerability has been identified in the Silicon Labs Simplicity SDK, specifically within the 802.15.4 packet processing component. This vulnerability allows for the creation of malformed 802.15.4 packets that, when processed, cause a buffer overflow. The overflow triggers an assertion failure, leading to a denial-of-service condition. Fortunately, this error condition is automatically cleared by a watchdog reset.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by triggering a buffer overflow that leads to an assertion failure. The error condition can be cleared automatically by a watchdog reset.

Remediation

Users can upgrade to the latest version of the Silicon Labs Simplicity SDK to address this vulnerability. The patched version is included in the official release on the Silicon Labs GitHub repository.