VULNERABILITY INTELLIGENCE

CVE-2026-6924

EPSS probability0.45%
CISA KEVNot currently listed
Published2026-07-23
Last modified2026-10-24

Description

A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same stream of numbers. This vulnerability was discovered after the impacted repository was already deprecated.

Weakness classification

  • product-security@silabs.com: CWE-336

Primary references