9.4Kritisch
CVE-2025-8414Zigbee Green Power Host Buffer Overflow Vulnerability
Beschreibung
Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerability.
Schwachstellentyp (CWE):
CWE-20
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| silabs.com | Gecko SDK | ≤ 4.4.6 | |
| silabs.com | Simplicity SDK | ≤ 2025.6.0, ≤ 2024.12.2 |
Referenzen und Patches
- https://community.silabs.com/068Vm00000WJZED vendor-advisory