In EmberZNet versions up to and including 9.0.2, malformed global Zigbee Cluster Library (ZCL) messages can cause out-of-bounds reads in the framework's parsing logic, resulting in process termination. The messages must originate from a device that has already joined the network. No information leakage to the attacker has been observed. The vulnerability is classified under CWE-125 (Out-of-bounds Read) and CWE-130 (Improper Handling of Length Parameter Inconsistency). The CVSS 4.0 base score is 7.1, indicating high severity. No official patch or remediation level has been published by Silicon Labs as of the data provided.

Successful exploitation causes the affected process to terminate due to out-of-bounds reads, resulting in denial of service. There is no observed information leakage or other impacts such as privilege escalation or remote code execution. The attacker must have network access and be a device already joined to the network to send the malformed messages.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Silicon Labs advisories for updates. Until a patch is available, restricting network access to trusted devices and monitoring for abnormal ZCL message activity may reduce risk.