CVE-2026-47148

Katalog CVE

CVSS 6.5 · Medium EPSS 0,44%

Kerentanan Out-of-bounds Read pada silabs emberznet. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigger repeated reads past the end of the message payload and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed. Only devices supporting the Groups cluster may be impacted.

Rincian

Terbit di NVD

25 Juni 2026

Terakhir diubah

25 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,44% peluang dieksploitasi; lebih tinggi dari 36,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/SiliconLabsSoftware/sisdk-release/ not applicable
• https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm00000pEGPQIA4?operationCon... permissions required