CVE-2025-1394

medium

Description

Failure to handle the error status returned by the buffer management APIs in SiLabs EmberZNet Zigbee stack may result in data leaks or potential Denial of Service (DoS).

References

https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-8.1.0.0.pdf

https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-8.0.3.0.pdf

https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-7.5.0.0.pdf

https://community.silabs.com/068Vm00000SkHNX

Details

Source: Mitre, NVD

Published: 2025-07-30

Updated: 2025-07-30

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity: High

CVSS v4

Base Score: 5.9

Vector: CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N