CVE-2025-2329
BaseFortify
Publication date: 2025-07-25
Last updated on: 2025-07-29
Assigner: Silicon Graphics (SGI)
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| silicon_labs | openthread_rcp | 4.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-908 | The product uses or accesses a resource that has not been initialized. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs in Silicon Labs OpenThread RCP devices under high traffic conditions. The device fails to clear the SPI transmit buffer properly, which can cause it to send a corrupt packet over the SPI interface to its host. This corrupt packet causes the host to reset the RCP, leading to a denial of service condition.
How can this vulnerability impact me? :
The impact of this vulnerability is a denial of service on the host system that communicates with the affected OpenThread RCP device. When the host receives a corrupt SPI packet, it resets the RCP, which can disrupt normal operation and availability of the system relying on this communication.