CVE-2026-47148 | BDVDB-2026-343121 Detail

Description#

In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigger repeated reads past the end of the message payload and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed. Only devices supporting the Groups cluster may be impacted.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-06-25Record published in the CVE List.