CVE-2026-6924CWE-336

CVE-2026-6924

published July 24, 2026

CVSS
8.7
EPSS
0%
Percentile
37.7
In the wild
Unconfirmed
What it is

A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same stream of numbers. This vulnerability was discovered after the impacted repository was already deprecated.

The record
Technical detail
CVSS
8.7 · NONE
CVSS v4.0
Not supplied
EPSS
0.00445 · 37.7th percentile
Weakness
CWE-336 · Same Seed in Pseudo-Random Number Generator (PRNG)
Published
2026-07-24T01:17Z
References (2)
https://github.com/SiliconLabs/matter/tree/release_2.3.1-1.3 · [email protected]https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/a45Vm0000009SzZIAU?operationContext=S1 · [email protected]
EPSS history
Timeline
  • 23 JUL 21:05Z
    Weak entropy initialization in Silicon Labs Matter SiWx917 TinyCrypt path
    cvelistv5