Skip to content
OpenAdvisories
High · 7.5 CVE-2026-94502 EUVD-2026-108184GHSA-88mg-4rp6-8rpq

Out-of-bounds write in Zigbee Publish Price Matrix handling

Published Oct 22, 2026 · Updated Oct 23, 2026 · Assigned by Silabs

Description

In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted.

Affected products

VendorProductAffectedFixed
Silicon Labs EmberZNet ≤ 9.1.1 —

References