CVE-2020-6007 Memory corruption in Philips Hue Bridge 2.X
A heap-based buffer overflow in Philips Hue Bridge allows remote attackers to execute arbitrary code during the commissioning phase.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2020-6007?
CVE-2020-6007 is a high-severity memory corruption vulnerability in Philips Hue Bridge 2.X, published on 23 Jan 2020. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the commissioning phase, resulting in a remote code execution.
Which versions are affected by CVE-2020-6007?
It affects 1 product.
Products include Philips Hue Bridge V2 Firmware.
How do I fix CVE-2020-6007?
No fix has been published for CVE-2020-6007 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2020-6007 being exploited?
There is no known exploitation of CVE-2020-6007 in the wild and no public exploit code.
Other vulnerabilities in Philips Hue Bridge 2.X
- CVE-2026-3556 Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2026-3560 Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2026-3558 Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability
- CVE-2026-3559 Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability
- CVE-2026-3555 Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability
Sources
Also known as GHSA-vf3h-hp75-rg56.