medium5.7
CVE-2022-24939
A malformed packet containing an invalid destination address, causes a stack overflow in the Ember ZNet stack.
Impact
A malformed packet containing an invalid destination address, causes a stack overflow in the Ember ZNet stack. This causes an assert which leads to a reset, immediately clearing the error.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Silabs | Gecko Software Development Kit | All versions |
| Silabs | Zigbee Emberznet | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/SiliconLabs/gecko_sdk
- https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000IWDCwQAP?operationContext=S1
- https://github.com/SiliconLabs/gecko_sdk
- https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000IWDCwQAP?operationContext=S1