Description
Due to improper input validation, a buffer overflow vulnerability is present in
Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain
conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| silabs.com | Simplicity SDK | ≤ 2025.6.0, ≤ 2024.12.2 | — |
| silabs.com | Gecko SDK | ≤ 4.4.6 | — |
References
- https://community.silabs.com/068Vm00000WJZED vendor-advisory permissions-required