CVE-2026-47150
IAS Zone enroll invalid table index and write in EmberZNet 9.0.2
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
In EmberZNet v9.0.2 and earlier, malformed IAS Zone enrollment messages can trigger an out-of-bounds state-table write and terminate the process. The size and location of this write is limited. These messages must come from a device that has already joined the network. Only devices supporting the IAS Zone cluster may be impacted.
| CWE | CWE-787 |
| Vendor | silicon labs |
| Product | emberznet |
| Published | Jun 25, 2026 |
| Last Updated | Jun 25, 2026 |
Stay Ahead of the Next One
Get instant alerts for silicon labs emberznet
Be the first to know when new unknown vulnerabilities affecting silicon labs emberznet are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Silicon Labs / EmberZNet
0 ≤ 9.0.2
References
Credits
Junming C. (@Chapoly1305) and Prof. Qiang Zeng of George Mason University