---
id: "CVE-2026-107359"
kind: "vulnerability"
aliases: ["CVE-2026-107359"]
title: "WF200 firmware: beacon handler input flaw causes divide-by-zero fault"
severity: "high"
cvss: 7.1
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "WF200 firmware", "fixed": [], "affected": "<= 3.17.0", "ecosystem": "vendor"}]
ecosystems: []
tags: ["denial-of-service", "embedded", "firmware", "infrastructure", "silicon-labs", "wf200", "wifi"]
not_affected_if: []
published_at: "2026-11-05T18:17:00+00:00"
first_seen_at: "2026-11-05T18:40:09+00:00"
updated_at: "2026-11-05T18:42:39+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107359", "first_seen_at": "2026-11-05T18:40:09+00:00"}, {"source": "analyst", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107359", "first_seen_at": "2026-11-05T18:42:39+00:00", "cites": ["https://nvd.nist.gov/vuln/detail/CVE-2026-107359", "https://github.com/SiliconLabs/wfx-firmware/blob/master/CHANGES.md"]}]
exploit_sources: []
---

# WF200 firmware: beacon handler input flaw causes divide-by-zero fault

Improper input validation in the beacon handler of WF200 firmware 3.17.0 and earlier can trigger a divide-by-zero fault. The sources do not say whether this crashes the device or allows anything beyond a fault.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:WF200 firmware affected <= 3.17.0 fixed no fixed version listed

## How to check

Read the WF200 firmware version loaded by your host driver (the wfm_wf200_C0.sec file in /lib/firmware on Linux with the wfx driver, or the version in the startup indication) and compare it to 3.17.0. Also check if you use WFM200 modules, which share the WF200 firmware line; no source confirms they are affected.

## Timeline

- 2026-11-05T18:40:09+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-107359
- 2026-11-05T18:42:39+00:00 analyst https://nvd.nist.gov/vuln/detail/CVE-2026-107359 — Only NVD found; Silicon Labs advisory not located (dashboard is JS-only, no CVE text on web search). The firmware CHANGES.md lists 3.17.0 as the newest release (2023-10-25) and has no fix entry, so the fixed version is unknown. The vendor does not say no fix exists, so fix_status is left unset. Nothing verified. Check the Silicon Labs advisory dashboard for the CVE later.

## Documents

- [describes] NVD CVE-2026-107359 https://nvd.nist.gov/vuln/detail/CVE-2026-107359
- [mentions] WFx Firmware Release Note (CHANGES.md) https://github.com/SiliconLabs/wfx-firmware/blob/master/CHANGES.md

## From the sources

Improper input validation in the beacon handler for WF200 firmware versions 3.17.0 and earlier may result in a divide-by-zero fault.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_