CVE-2025-7964 Zigbee Router Denial of Service
Attackers can cause Zigbee routers to enter a non-rejoinable state via malformed MAC requests, requiring manual recommissioning to recover.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-7964?
CVE-2025-7964 is a critical denial of service vulnerability in silabs.com Silicon Labs Zigbee Stack, published on 30 Jan 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
After receiving a
malformed 802.15.4 MAC Data Request
the Zigbee Coordinator sends a ‘network leave’ request to Zigbee router resulting in the Zigbee Router getting stuck in a non-rejoinable state. If a suitable parent is not available, the end devices will be unable to rejoin. A manual recommissioning is required to recover the Zigbee Router.
Weakness: CWE-229
Which versions are affected by CVE-2025-7964?
How do I fix CVE-2025-7964?
No fix has been published for CVE-2025-7964 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2025-7964 being exploited?
There is no known exploitation of CVE-2025-7964 in the wild and no public exploit code.
Sources
Also known as GHSA-mwv3-x6r9-r9c2.