9.4Kritik
CVE-2025-8414Zigbee Green Power Host Buffer Overflow Vulnerability
Açıklama
Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerability.
Zayıflık türü (CWE):
CWE-20
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| silabs.com | Gecko SDK | ≤ 4.4.6 | |
| silabs.com | Simplicity SDK | ≤ 2025.6.0, ≤ 2024.12.2 |
Kaynaklar ve yamalar
- https://community.silabs.com/068Vm00000WJZED vendor-advisory