Out-of-bounds Read Vulnerability in EmberZNet by Silicon Labs

CVE-2026-4526

What is CVE-2026-4526?

In EmberZNet versions 9.0.2 and earlier, malformed global ZCL messages can lead to out-of-bounds reads within the framework's parsing logic, potentially resulting in the termination of the process. It is important to note that these malformed messages originate from devices that are already part of the network, although no information leakage to the sender has been reported. Users of affected versions should assess their exposure and consider applying patches to mitigate this risk.

References