---
id: CVE-2026-6432
title: >-
  Improper bounds validation in the ZAP command parser of EmberZNet SDK versions
  8.0.0 through 9.1.1 (inclusive) and before 7.5.2 (exclusive) may result in
  crashes or dynamic memory leakage
summary: >-
  Improper bounds validation in the ZAP command parser of EmberZNet SDK versions
  8.0.0 through 9.1.1 (inclusive) and before 7.5.2 (exclusive) may result in
  crashes or dynamic memory leakage. In order to exploit this vulnerability, an
  attac…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'
cwe:
  - CWE-130
vendor: Silicon Labs
product: EmberZNet
affected:
  - EmberZNet >= 8.0.0 <= 9.1.1
  - EmberZNet <= 7.5.1
published: '2026-06-25'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T14:17:27.113'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-6432'
references:
  - url: >-
      https://github.com/SiliconLabsSoftware/docs-security-advisories/blob/main/Advisories/500-599/A-00000580.md
    label: product-security@silabs.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-06-25T15:33:12.084091Z'
cvssSource: cna
epss: 0.00397
epssPercentile: 0.32235
ingestedAt: '2026-10-15T14:07:30.102Z'
---

## Overview

Improper bounds validation in the ZAP command parser of EmberZNet SDK versions 8.0.0 through 9.1.1 (inclusive) and before 7.5.2 (exclusive) may result in crashes or dynamic memory leakage. In order to exploit this vulnerability, an attacker would have to have the ability to send arbitrary messages on the network. The only known exploit of this vulnerability leaks a limited number of bytes from the stack. No denial-of-service, memory corruption, or remote code execution has been shown.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.