This vulnerability (CVE-2026-47150) in EmberZNet up to version 9.0.2 allows an attacker to send malformed IAS Zone enrollment messages that cause an out-of-bounds write in the state table, leading to process termination. The attack requires the malicious message to originate from a device already joined to the network and supporting the IAS Zone cluster. The out-of-bounds write is constrained in size and location, limiting the impact to process termination rather than arbitrary code execution. No official fix or patch has been disclosed as of the publication date.

Successful exploitation results in an out-of-bounds write that terminates the affected process, potentially causing denial of service. The vulnerability requires network access with a device already joined and supporting the IAS Zone cluster, limiting the attack surface. There is no indication of privilege escalation or remote code execution from the available data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to trusted devices supporting the IAS Zone cluster and monitor for unusual enrollment messages. No official remediation or temporary fix is currently available.