Improper Bounds Validation in EmberZNet SDK by Silicon Labs
CVE-2026-6432

5.3MEDIUM

Key Information:

Vendor

Silicon Labs

Status
Sisdk
Vendor
CVE Published:
25 June 2026

What is CVE-2026-6432?

The EmberZNet SDK from Silicon Labs is impacted by an improper bounds validation issue, primarily found in versions 9.0.2 and earlier. This vulnerability can lead to application crashes or dynamic memory leakage, potentially exposing systems to unforeseen failures or resource exhaustion. Users of the SDK should take immediate action to assess their deployment and implement recommended patches provided by Silicon Labs to mitigate the risks associated with this vulnerability.

Affected Version(s)

SiSDK 0 <= 2025.12 and earlier

References

https://siliconlabs.lightning.force.com/sfc/servlet.sheph...
vendor-advisorypermissions-required
https://github.com/SiliconLabsSoftware/sisdk-release
patch

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Junming C. (@Chapoly1305) and Prof. Qiang Zeng of George Mason University
.