7.1
Élevée
CVE-2026-47148 In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigger repeated reads past the end of the…
Description
In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigger repeated reads past the end of the message payload and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed. Only devices supporting the Groups cluster may be impacted.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| EmberZNet 9.0 | premières → 9.0.2 | Pas de correctif indiqué |
Autres CVE de EmberZNet
Les 17 CVE de EmberZNet →
CVE-2026-85079
In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially…
7.5
Élevée
CVE-2026-94502
In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write…
7.5
Élevée
CVE-2026-66282
In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive function call…
6.0
Moyenne
CVE-2026-66281
In EmberZNet 9.1.1 and earlier, a malformed Discover Attributes command can result in a loop with unreachable exit…
6.0
Moyenne