๐Ÿ” CVE Alert

CVE-2026-5706

UNKNOWN 0.0

Buffer overflow in Bluetooth Mesh SDK when handling extended advertisements

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages must come from a device that has already joined the network. Only provisioners supporting extended advertisements may be impacted.

CWE CWE-130
Vendor silicon labs
Product bt mesh sdk
Published Aug 27, 2026
Stay Ahead of the Next One

Get instant alerts for silicon labs bt mesh sdk

Be the first to know when new unknown vulnerabilities affecting silicon labs bt mesh sdk are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Silicon Labs / BT Mesh SDK
0 โ‰ค 6.1.4, 9.1.0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
siliconlabs.lightning.force.com: https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/a45Vm000000Et6HIAS?operationContext=S1 github.com: https://github.com/SiliconLabs/gecko_sdk/releases