Search Results (25 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-47151 2 Silabs, Silicon Labs 2 Emberznet, Emberznet 2026-06-26 7.1 High
In EmberZNet v9.0.2 and earlier, malformed ClearWeekdaySchedule messages can trigger out-of-bounds writes into Door Lock schedule state. The size and location of this data is limited. These messages must come from a device that has already joined the network. Only devices supporting the Door Lock cluster may be impacted.
CVE-2026-47152 2 Silabs, Silicon Labs 2 Emberznet, Emberznet 2026-06-26 6.5 Medium
In EmberZNet v9.0.2 and earlier, a malformed Level Control Move command can terminate the process through a divide-by-zero fault. This command must come from a device that has already joined the network. Only devices supporting the Level Control cluster may be impacted.
CVE-2026-47153 2 Silabs, Silicon Labs 2 Emberznet, Emberznet 2026-06-26 6.5 Medium
In EmberZNet v9.0.2 and earlier, a malformed Level Control Step command can terminate the process through a divide-by-zero fault. This command must come from a device that has already joined the network. Only devices supporting the Level Control cluster may be impacted.
CVE-2026-47154 2 Silabs, Silicon Labs 2 Emberznet, Emberznet 2026-06-26 6.5 Medium
In EmberZNet v9.0.2 and earlier, a malformed GetProfileResponse message can trigger out-of-bounds reads while iterating interval entries and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed. Only devices supporting the Simple Metering cluster may be impacted.
CVE-2026-3290 1 Silicon Labs 1 Rs9116 Sdk 2026-05-15 N/A
Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values