<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: gecko os</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-2838: Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability</title><link>https://patchthecve.com/cve/CVE-2025-2838.html</link><guid>https://patchthecve.com/cve/CVE-2025-2838.html</guid><pubDate>Wed, 17 Jun 2026 09:07:42 +0000</pubDate><description>MEDIUM 6.5: Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability.
</description></item><item><title>CVE-2025-2837: Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2025-2837.html</link><guid>https://patchthecve.com/cve/CVE-2025-2837.html</guid><pubDate>Wed, 17 Jun 2026 09:07:42 +0000</pubDate><description>HIGH 8.8: Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability</description></item><item><title>CVE-2024-24731: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Si</title><link>https://patchthecve.com/cve/CVE-2024-24731.html</link><guid>https://patchthecve.com/cve/CVE-2024-24731.html</guid><pubDate>Wed, 17 Jun 2026 07:14:45 +0000</pubDate><description>HIGH 7.5: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the implementation of the http_download command. The issue results from th</description></item><item><title>CVE-2024-23973: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Si</title><link>https://patchthecve.com/cve/CVE-2024-23973.html</link><guid>https://patchthecve.com/cve/CVE-2024-23973.html</guid><pubDate>Wed, 17 Jun 2026 07:13:58 +0000</pubDate><description>HIGH 8.8: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability. 

The specific flaw exists within the handling of HTTP GET requests. The issue results from the lack of pro</description></item><item><title>CVE-2024-23937: This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installatio</title><link>https://patchthecve.com/cve/CVE-2024-23937.html</link><guid>https://patchthecve.com/cve/CVE-2024-23937.html</guid><pubDate>Wed, 17 Jun 2026 07:13:55 +0000</pubDate><description>MEDIUM 4.3: This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the debug interface. The issue results from the lack of proper val</description></item><item><title>CVE-2024-23938: Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2024-23938.html</link><guid>https://patchthecve.com/cve/CVE-2024-23938.html</guid><pubDate>Wed, 17 Jun 2026 07:13:55 +0000</pubDate><description>HIGH 8.8: Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability.

The</description></item></channel></rss>