Medium · 4.3 CVE-2024-6352 EUVD-2024-48005

Malformed packet leads to denial of service in APS layer

Published Jan 13, 2025 · Updated Aug 27, 2025 · Assigned by Silabs

Vendor: silabs.com Product: SiSDK

Description

A malformed packet can cause a buffer overflow in the APS layer of the Ember ZNet stack and lead to an assert

Affected products

Vendor	Product	Affected	Fixed
silabs.com	SiSDK	≤ 2024.6.2	—

Advisories 2

ICSA-26-027-03 Schneider Electric Zigbee Products CISA ICS & IT advisories · Jan 27, 2026
SEVD-2026-013-03 Multiple Vulnerabilities on Zigbee Products Schneider Electric CPCERT · Jan 13, 2026

References

https://github.com/SiliconLabs/simplicity_sdk/releases release-notes
https://community.silabs.com/069Vm00000HtvDgIAJ vendor-advisory permissions-required