CVE-2026-5706: CWE-130: Improper Handling of Length Parameter Inconsistency, CWE-787: Out-of-bounds Write in Silicon Labs BT Mesh SDK

This vulnerability in Silicon Labs BT Mesh SDK versions 6.1.4 and earlier arises from improper handling of length parameter inconsistencies in extended Bluetooth Mesh advertisements. Malformed extended advertisements can trigger out-of-bounds writes, causing stack corruption and enabling remote code execution. Exploitation requires the attacker device to be part of the mesh network, and only provisioners supporting extended advertisements are impacted. The CVSS 4.0 score is 8.9, reflecting high impact with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vendor has not yet provided a patch or official remediation.

Successful exploitation can lead to stack corruption and remote code execution on affected devices running Silicon Labs BT Mesh SDK 6.1.4 and earlier. This could allow an attacker within the mesh network to execute arbitrary code remotely, potentially compromising device integrity and control. The vulnerability requires the attacker to be a device already joined to the mesh network and targets provisioners supporting extended advertisements.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, limit network access to trusted devices only and monitor for unusual activity from devices within the mesh network. Avoid using provisioners that support extended advertisements if possible, or apply vendor-recommended mitigations once published.