gecko os vulnerabilities and fixes
Recent CVEs affecting gecko os, with upgrade or downgrade steps. 6 tracked.
Also searched as: geckoos.
gecko os has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-03-26. Highest priority: CVE-2024-23938 (score 46/100).
- CVE-2025-2838 MEDIUM 6.5 MITIGATE Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability
- CVE-2025-2837 HIGH 8.8 MITIGATE Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-24731 HIGH 7.5 MITIGATE This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Si
- CVE-2024-23973 HIGH 8.8 MITIGATE This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Si
- CVE-2024-23938 HIGH 8.8 MITIGATE Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-23937 MEDIUM 4.3 MITIGATE This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installatio
FAQ
How do I fix gecko os vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gecko os being exploited right now?
None of the tracked gecko os CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gecko os CVE should I patch first?
CVE-2024-23938 currently ranks highest (46/100): Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution Vulnerability.