CVE-2026-89410 In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive…

Description

In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive information.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Z-Wave SDK 8.1	premières → 8.1.1	Pas de correctif indiqué

Autres CVE de Z-Wave SDK

Les 4 CVE de Z-Wave SDK →

CVE-2026-89409 In Z-Wave SDK 8.1.1 and earlier (for 700/800 series devices) and 6.85.02 and earlier (for 500 series devices), missing… 5.3 Moyenne CVE-2024-22472 A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential… 8.1 Élevée CVE-2023-51395 The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices 8.8 Élevée