Medium · 4.3 CVE-2024-6351 EUVD-2024-48015

Malformed packet leads to denial of service in NWK/APS layer

Published Jan 28, 2025 · Updated Feb 18, 2025 · Assigned by Silabs

Vendor: silabs.com Product: SiSDK

Description

A malformed packet can cause a buffer overflow in the NWK/APS layer of the Ember ZNet stack and lead to an assert

Affected products

Vendor	Product	Affected	Fixed
silabs.com	SiSDK	< 2024.12.0	2024.12.0

Advisories 2

ICSA-26-027-03 Schneider Electric Zigbee Products CISA ICS & IT advisories · Jan 27, 2026
SEVD-2026-013-03 Multiple Vulnerabilities on Zigbee Products Schneider Electric CPCERT · Jan 13, 2026

References

https://github.com/SiliconLabs/simplicity_sdk/releases release-notes
https://community.silabs.com/069Vm00000HtvDgIAJ vendor-advisory permissions-required