| CVE-2026-85079 |
In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially…
|
7.5
High
|
Oct 22, 2026 |
| CVE-2026-94502 |
In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write…
|
7.5
High
|
Oct 22, 2026 |
| CVE-2026-66282 |
In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive function call…
|
6.0
Medium
|
Oct 22, 2026 |
| CVE-2026-66281 |
In EmberZNet 9.1.1 and earlier, a malformed Discover Attributes command can result in a loop with unreachable exit…
|
6.0
Medium
|
Oct 22, 2026 |
| CVE-2026-85080 |
In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an out-of-bounds write leading to a…
|
6.0
Medium
|
Oct 22, 2026 |
| CVE-2026-6432 |
Improper bounds validation in the ZAP command parser of EmberZNet SDK versions 8.0.0 through 9.1.1 (inclusive) and…
|
5.3
Medium
|
Jun 25, 2026 |
| CVE-2026-47154 |
In EmberZNet v9.0.2 and earlier, a malformed GetProfileResponse message can trigger out-of-bounds reads while…
|
7.1
High
|
Jun 25, 2026 |
| CVE-2026-47153 |
In EmberZNet v9.0.2 and earlier, a malformed Level Control Step command can terminate the process through a…
|
7.1
High
|
Jun 25, 2026 |
| CVE-2026-47152 |
In EmberZNet v9.0.2 and earlier, a malformed Level Control Move command can terminate the process through a…
|
7.1
High
|
Jun 25, 2026 |
| CVE-2026-47151 |
In EmberZNet v9.0.2 and earlier, malformed ClearWeekdaySchedule messages can trigger out-of-bounds writes into Door Lock…
|
7.1
High
|
Jun 25, 2026 |
| CVE-2026-47150 |
In EmberZNet v9.0.2 and earlier, malformed IAS Zone enrollment messages can trigger an out-of-bounds state-table write…
|
7.1
High
|
Jun 25, 2026 |
| CVE-2026-47149 |
In EmberZNet v9.0.2 and earlier, malformed or out-of-range Door Lock user identifiers can trigger out-of-bounds table…
|
7.1
High
|
Jun 25, 2026 |
| CVE-2026-47148 |
In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigger repeated reads past the end of the…
|
7.1
High
|
Jun 25, 2026 |
| CVE-2026-47147 |
In EmberZNet v9.0.2 and earlier, malformed OTA requests can drive the OTA server parser into out-of-bounds reads
|
7.1
High
|
Jun 25, 2026 |
| CVE-2026-47146 |
In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process
|
7.1
High
|
Jun 25, 2026 |
| CVE-2026-47145 |
In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process
|
7.1
High
|
Jun 25, 2026 |
| CVE-2026-4526 |
In EmberZNet v9.0.2 and earlier, malformed global ZCL messages can trigger out-of-bounds reads in framework parsing…
|
7.1
High
|
Jun 25, 2026 |