The Ember ZNet stack’s packet buffer manager may read out of bound memory leading to an assert, causing a Denial of Service (DoS).
Weakness
The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
Potential Mitigations
References
- https://community.silabs.com/068Vm00000SkHNX
- https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-7.5.0.0.pdf
- https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-8.0.3.0.pdf
- https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-8.1.0.0.pdf