CVE-2025-8414

Critical

Description

Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerability.

SeverityCritical

CVSS9.4

Exploit probability21. percentile0.3%

ProductSimplicity SDK

PublishedOct 17, 2025

First seenOct 17, 2025

Weakness typeCWE-20Improper input validation

How to fix

Vendor advisories

community.silabs.com/068Vm00000WJZED

Affected products

Product	Affected versions	Fixed in
silabs.com Simplicity SDK	v ≤ 2025.6.0, v ≤ 2024.12.2	—
silabs.com Gecko SDK	v ≤ 4.4.6	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.