VULNERABILITY INTELLIGENCE

CVE-2025-8414

EPSS probability0.27%
CISA KEVNot currently listed
Published2025-10-17
Last modified2026-10-18

Description

Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerability.

Weakness classification

  • product-security@silabs.com: CWE-20

Primary references