5.9Mittel
CVE-2025-1394Denial of Service (DoS) vulnerabilitiey in Zigbee library
Beschreibung
The Ember ZNet stack’s packet buffer manager may read out of bound memory leading to an assert, causing a Denial of Service (DoS).
Schwachstellentyp (CWE):
CWE-252
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| silabs.com | Zigbee Stack | ≤ 4.4.4 |
Referenzen und Patches
- https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-7.5.0.0.pdf release-notes
- https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-8.0.3.0.pdf release-notes
- https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-8.1.0.0.pdf release-notes
- https://community.silabs.com/068Vm00000SkHNX vendor-advisory