10.0
Critical
CVE-2025-36939 Multiple vulnerabilities exist in OpenThread's handling of MLE packets
Description
Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Nest | 3.78.518349 | No fix stated |