Description
A malformed packet can cause a buffer overflow in the APS layer of the Ember ZNet stack and lead to an assert
References (2)
Core 2
Core References
Various Sources release-notes
https://github.com/SiliconLabs/simplicity_sdk/releases
Various Sources vendor-advisory
permissions-required
https://community.silabs.com/069Vm00000HtvDgIAJ
Scores
CVSS v3
4.3
EPSS
0.0013
EPSS Percentile
32.4%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-120
Status
published
Products (1)
silabs.com/SiSDK
< 2024.6.2
Published
Jan 13, 2025
Tracked Since
Feb 18, 2026