Skip to content
OpenAdvisories
Critical · 10.0 CVE-2025-36939 EUVD-2025-210766GHSA-x6v7-jjvq-5rr9

Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send spe…

Published Aug 24, 2026 · Updated Aug 24, 2026 · Assigned by Google_Devices

Description

Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.

Affected products

VendorProductAffectedFixed
Google Nest 3.78.518349 —

References