CVE-2026-47145

In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process. These messages must come from a device that has already joined the network. Only devices supporting the Color Control cluster may be impacted.

Score

CVSS 4.0 7.1 High

Status

Analyzed - product-security@silabs.com

Published

2026-06-25

Last modified

2026-10-25

Weaknesses

CWE-617

Affected products

• Emberznet (Silabs)
• Emberznet (Silicon Labs)

References

• https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm00000pEGPQIA4?operationContext=S1
• https://github.com/SiliconLabsSoftware/sisdk-release/