Quick answers
- Is CVE-2025-12131 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2025-12131 being exploited in the wild.
- How severe is CVE-2025-12131?
- Medium severity, with a CVSS score of 6.5, published 5 February 2026.
- Which products and versions are affected?
- Silicon Labs 802.15.4 Stack.
- Is there a fix for CVE-2025-12131?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2025-12131 attacked?
- It is attacked over the network, in a software library.
- Am I affected by CVE-2025-12131?
- Check whether you run Silabs Simplicity Software Development Kit or Silicon Labs 802.15.4 Stack. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The vulnerability is an assertion failure triggered by processing a truncated 802.15.4 frame. The affected component does not properly validate packet length before dereferencing packet data, causing an assert when encountering a malformed frame below the minimum expected size. An attacker with network access to the 802.15.4 network can send a crafted truncated packet to trigger the assertion. Successful exploitation results in denial of service through application or device crash. Patches addressing the input validation flaw are available from Silicon Labs.
Affected products
- Silicon Labs 802.15.4 Stack
Timeline
- 2026-02-05: disclosed