CVEvulnerability
CVE-2022-24938
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-11-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-119, CWE-787
Description
A malformed packet causes a stack overflow in the Ember ZNet stack. This causes an assert which leads to a reset, immediately clearing the error.
Affected configurations
• silabs emberznet 1.0.0
Related
References
- https://github.com/SiliconLabs/gecko_sdk Not Applicable
- https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000HbLj2QAF?operationContext=S1 Permissions Required, Vendor Advisory
- https://github.com/SiliconLabs/gecko_sdk Not Applicable
- https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000HbLj2QAF?operationContext=S1 Permissions Required, Vendor Advisory