What’s Vulnerable › Vulnerabilities

CVE-2025-8414: Zigbee Green Power Host Buffer Overflow Vulnerability

• Severity: critical (CVSS 9.4 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-17 · updated 2026-10-18
• Weakness: CWE-20

Description

Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerability.

Affected products

• silabs.com Gecko Platform: through 4.4.6
• silabs.com Simplicity SDK: through 2025.6.0; through 2024.12.2

References

• https://community.silabs.com/068Vm00000WJZED

Get alerted when CVE-2025-8414 or the next vulnerability affects your stack