CVE-2026-85080: CWE-121 Stack-based Buffer Overflow in Silicon Labs EmberZNet
Description
CVE-2026-85080 is a stack-based buffer overflow vulnerability in Silicon Labs EmberZNet versions 9.1.1 and earlier. It occurs when a malformed GetGroupMembership message is processed, causing an out-of-bounds write that leads to a crash. The vulnerability affects only devices that have joined the network and support the Group Cluster. Although the overflow allows limited data to be written, no remote code execution has been observed. The CVSS 4.0 score rates this vulnerability as medium severity.
CVSS v4.0
Score 6.0medium
Affected software
Silicon Labs
EmberZNet
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
In EmberZNet versions up to and including 9.1.1, processing a malformed GetGroupMembership message can trigger a stack-based buffer overflow (CWE-121). This vulnerability results in an out-of-bounds write that causes the affected device to crash. The exploit requires the message to originate from a device already joined to the network and impacts only devices supporting the Group Cluster. The overflow allows only a limited number of values to be written, and no remote code execution path has been identified. The CVSS 4.0 vector indicates network attack vector, low attack complexity, partial privileges required, no user interaction, and high impact on availability.
Potential Impact
Successful exploitation causes a denial of service via device crash due to out-of-bounds write. No remote code execution or privilege escalation has been observed. The impact is limited to devices supporting the Group Cluster that have joined the network.
Mitigation Recommendations
No vendor advisory or patch information is provided. Patch status is not yet confirmed — check the Silicon Labs advisory for current remediation guidance. Until a fix is available, limit network access to trusted devices and monitor for malformed GetGroupMembership messages from joined devices.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Silabs
- Date Reserved
- 2026-09-02T21:28:42.152Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ada17294d27ba8daa5b44b8
Added to database: 10/22/2026, 14:01:13 UTC
Last enriched: 10/22/2026, 14:15:28 UTC
Last updated: 10/22/2026, 14:16:16 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.