5.9Medium
CVE-2025-1394Denial of Service (DoS) vulnerabilitiey in Zigbee library
Description
The Ember ZNet stack’s packet buffer manager may read out of bound memory leading to an assert, causing a Denial of Service (DoS).
Weakness (CWE):
CWE-252
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| silabs.com | Zigbee Stack | ≤ 4.4.4 |
References and patches
- https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-7.5.0.0.pdf release-notes
- https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-8.0.3.0.pdf release-notes
- https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-8.1.0.0.pdf release-notes
- https://community.silabs.com/068Vm00000SkHNX vendor-advisory