Insufficient Encryption Key Size in SMP Security for Silabs Products

CVE-2026-19293

What is CVE-2026-19293?

The SMP security request from peripheral devices does not adequately specify the maximum encryption key size supported, which raises concerns about the security of Bluetooth communications. This oversight facilitates the potential for brute-force attacks, as attackers can exploit weaker encryption keys that fall below the maximum threshold. Protecting against such vulnerabilities is crucial to maintaining robust security protocols in wireless communication systems.

References