CVE-2025-8414 Zigbee Green Power Host Buffer Overflow Vulnerability
A buffer overflow in Zigbee EZSP Host Applications allows arbitrary code execution if an attacker has network key access.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-8414?
CVE-2025-8414 is a critical memory corruption vulnerability in silabs.com Gecko SDK, published on 17 Oct 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Due to improper input validation, a buffer overflow vulnerability is present in
Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain
conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerability.
Weakness: CWE-20
Which versions are affected by CVE-2025-8414?
How do I fix CVE-2025-8414?
No fix has been published for CVE-2025-8414 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2025-8414 being exploited?
There is no known exploitation of CVE-2025-8414 in the wild and no public exploit code.
Sources
Also known as GHSA-9ppj-5fv3-g9qh.