CVE-2025-14055CWE-125CWE-191

Integer underflow in Secure NCP host

Low · published February 20, 2026

CVSS v4.0
2.4
EPSS
0%
Percentile
8.6
In the wild
Unconfirmed
What it is

An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a specially crafted packet.

The record
Technical detail
CVSS v4.0
2.4 · LOW
Vector
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00194 · 8.6th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2026-02-20T14:45Z
EPSS history
Timeline
  • 20 FEB 14:45Z
    Integer underflow in Secure NCP host
    cvelistv5