Aller au contenu
Se connecter
5.3 Moyenne

CVE-2026-6432 Improper bounds validation in the ZAP command parser of EmberZNet SDK versions 8.0.0 through 9.1.1 (inclusive) and…

Description

Improper bounds validation in the ZAP command parser of EmberZNet SDK versions 8.0.0 through 9.1.1 (inclusive) and before 7.5.2 (exclusive) may result in crashes or dynamic memory leakage. In order to exploit this vulnerability, an attacker would have to have the ability to send arbitrary messages on the network. The only known exploit of this vulnerability leaks a limited number of bytes from the stack. No denial-of-service, memory corruption, or remote code execution has been shown.

Produits et versions touchés

Produit Versions touchées Corrigé en
SiSDK Versions non publiées
EmberZNet 8.0 8.0.0 → 9.1.1 Pas de correctif indiqué
EmberZNet 7.5 premières → 7.5.1 Pas de correctif indiqué

Autres CVE de SiSDK

Les 3 CVE de SiSDK →
CVE-2026-17610 In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service 6.0 Moyenne CVE-2026-2815 Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keys 8.4 Élevée
Suivre cette CVE