CVE-2026-6432

Summary dbcve.org

Improper bounds validation in EmberZNet SDK versions 9.0.2 and earlier allows an attacker to trigger crashes or cause dynamic memory leakage, likely through malformed Zigbee network packets or API calls that do not properly validate array or buffer boundaries before memory operations.

Mitigation

Upgrade EmberZNet SDK to version 9.0.3 or later if available; otherwise, audit code paths that handle external input and add explicit bounds checks before memory read/write operations.