CVE-2026-85079: CWE-121 Stack-based Buffer Overflow in Silicon Labs EmberZNet

In EmberZNet versions up to and including 9.1.1, processing a malformed Simple_Desc_req response can cause a stack-based buffer overflow (CWE-121). This vulnerability arises from an out-of-bounds write triggered by the malformed response. The attack vector requires the malicious response to originate from a device that has already joined the network, and the attacker must wait for a legitimate Simple_Desc_req to be issued before sending the crafted response. Successful exploitation could result in remote code execution on the affected device.

The vulnerability allows a remote attacker with low privileges and no user interaction to cause a stack-based buffer overflow, potentially leading to remote code execution. The attacker must be on the network and wait for a Simple_Desc_req to exploit the flaw. This could compromise the affected device's integrity and control.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit network exposure of devices running affected EmberZNet versions and monitor for unusual Simple_Desc_req responses from devices on the network.