Out-of-Bounds Write Vulnerability in EmberZNet by Silicon Labs

CVE-2026-85080

What is CVE-2026-85080?

In versions 9.1.1 and earlier of EmberZNet, a weakness exists that can be exploited by a malformed GetGroupMembership message, leading to an out-of-bounds write. This vulnerability manifests when messages originate from a device previously connected to the network. Although the scope is limited, and no remote code execution has been confirmed, the potential for system instability and crashes represents a security concern for devices utilizing the Group Cluster feature. The advisory underscores the importance of securing networked devices and monitoring communication for anomalies.

References