9.4Critical
CVE-2025-8414Zigbee Green Power Host Buffer Overflow Vulnerability
Description
Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerability.
Weakness (CWE):
CWE-20
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| silabs.com | Gecko SDK | ≤ 4.4.6 | |
| silabs.com | Simplicity SDK | ≤ 2025.6.0, ≤ 2024.12.2 |
References and patches
- https://community.silabs.com/068Vm00000WJZED vendor-advisory