Buffer Overflow Vulnerability in Zigbee EZSP Host Applications by Silicon Labs
CVE-2025-8414
9.4CRITICAL
What is CVE-2025-8414?
A vulnerability exists in Zigbee EZSP Host Applications due to improper input validation, leading to a buffer overflow condition. This flaw can result in stack corruption and may potentially allow attackers to execute arbitrary code, given that they have access to a network key. Proper measures should be taken to secure affected systems to mitigate the risks associated with this vulnerability.
Affected Version(s)
Gecko SDK 0 <= 4.4.6
Simplicity SDK 0 <= 2025.6.0
Simplicity SDK 0 <= 2024.12.2
