CVE-2025-8414 — Zigbee Green Power Host Buffer Overflow Vulnerability

CVE-2025-8414

Zigbee Green Power Host Buffer Overflow Vulnerability PUBLISHED

Description (CNA)

Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerability.

Affected (CNA)

Vendor / product	Versions
silabs.com / Simplicity SDK	affected 0 through 2025.6.0; affected 0 through 2024.12.2
silabs.com / Gecko SDK	affected 0 through 4.4.6

CWE

CWE-20

References

https://community.silabs.com/068Vm00000WJZED

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.