9.4Kritik

CVE-2025-8414Zigbee Green Power Host Buffer Overflow Vulnerability

silabs.com Simplicity SDK; silabs.com Gecko SDK Yayım: (1 yıl önce)

Açıklama

Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerability.

Zayıflık türü (CWE): CWE-20

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
silabs.com Gecko SDK ≤ 4.4.6
silabs.com Simplicity SDK ≤ 2025.6.0, ≤ 2024.12.2

Kaynaklar ve yamalar