CVE-2026-89410

Out-of-bounds read in Z-Wave NCP SPI Handler PUBLISHED

Description (CNA)

In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive information.

Vendor / product	Versions
Silicon Labs / Z-Wave SDK	affected 0 through 8.1.1

CWE-1285

CISA-ADP

No English description supplied.

No references supplied.