CVE-2025-36939

Katalog CVE

CVSS 5.7 · Medium EPSS 0,21%

Kerentanan Stack-based Buffer Overflow pada google nest wifi router firmware, google nest wifi point firmware +1 lainnya. Skor CVSS 3.1 5.7 (Medium) menurut NVD.

Deskripsi (NVD)

Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.

Rincian

Terbit di NVD

24 Agustus 2026

Terakhir diubah

7 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

5.7 (Medium), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-121: Stack-based Buffer Overflow

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.google.com/product-documentation/answer/17072818?hl=en&ref_topic=12974021&sjid=162763493707966... advisory vendor