Predictable Seed Issue in SiWx917 by Silicon Labs
CVE-2026-6924

8.7HIGH

Key Information:

Vendor

Silicon Labs

Status
Silicon Labs Matter Github
Vendor
CVE Published:
23 July 2026

What is CVE-2026-6924?

A vulnerability in the SiWx917 product results from improper entropy initialization, leading to predictable seed values in the Deterministic Random Bit Generator (DRBG). This flaw means that all random numbers produced by the Matter code will follow the same sequence, compromising data security and potentially revealing sensitive information. This issue was identified in a deprecated repository, underscoring the importance of maintaining up-to-date security practices when utilizing such technology.

Affected Version(s)

Silicon Labs Matter Github 0

References

https://siliconlabs.lightning.force.com/sfc/servlet.sheph...
vendor-advisorypermissions-required
https://github.com/SiliconLabs/matter/tree/release_2.3.1-1.3
patch

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Junming C. (@Chapoly1305) and Prof. Qiang Zeng of George Mason University
.