Silicon Labs Ember ZNet Stack Zigbee Buffer Overflow Vulnerability in APS Layer

A buffer overflow vulnerability has been identified in the APS layer of the Ember ZNet stack within the Silicon Labs Zigbee SDK. This issue arises from the processing of malformed packets, which can lead to an assertion failure. The vulnerability is present in several different versions of the Zigbee EmberZNet SDK.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to memory corruption and potentially allow for arbitrary code execution.

Remediation

Users can upgrade to Zigbee EmberZNet SDK version 8.1.2.0, which addresses this vulnerability. This version is available as part of the Silicon Labs Simplicity SDK.