3.7
Low
CVE-2024-10106 A buffer overflow vulnerability in the packet handoff plugin allows an attacker to overwrite memory outside the plugin's…
Description
A buffer overflow vulnerability in the packet handoff plugin allows an attacker to overwrite memory outside the plugin's buffer.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ember ZNet SDK 8.0 | 8.0.0 → 8.0.2 | No fix stated |
| Ember ZNet SDK 7.3 | 7.3.0 → 7.4.4 | No fix stated |
| Ember ZNet SDK 7.2 | earliest → 7.2.6 | No fix stated |
Other CVEs of Ember ZNet SDK
The 6 CVEs of Ember ZNet SDK →
CVE-2024-3043
An unauthenticated IEEE 802.15.4 'co-ordinator realignment' packet can be used to force Zigbee nodes to change their…
7.5
High
CVE-2023-51393
Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon…
5.3
Medium
CVE-2023-51394
High traffic environments may result in NULL Pointer Dereference vulnerability in Silicon Labs's Ember ZNet SDK before…
5.3
Medium
CVE-2023-51392
Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators,…
6.2
Medium