9.4Crítica
CVE-2025-8414Zigbee Green Power Host Buffer Overflow Vulnerability
Descripción
Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerability.
Debilidad (CWE):
CWE-20
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| silabs.com | Gecko SDK | ≤ 4.4.6 | |
| silabs.com | Simplicity SDK | ≤ 2025.6.0, ≤ 2024.12.2 |
Referencias y parches
- https://community.silabs.com/068Vm00000WJZED vendor-advisory