5.9Media
CVE-2025-1394Denial of Service (DoS) vulnerabilitiey in Zigbee library
Descripción
The Ember ZNet stack’s packet buffer manager may read out of bound memory leading to an assert, causing a Denial of Service (DoS).
Debilidad (CWE):
CWE-252
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| silabs.com | Zigbee Stack | ≤ 4.4.4 |
Referencias y parches
- https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-7.5.0.0.pdf release-notes
- https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-8.0.3.0.pdf release-notes
- https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-8.1.0.0.pdf release-notes
- https://community.silabs.com/068Vm00000SkHNX vendor-advisory