CVE-2025-36939CWE-121

CVE-2025-36939

Medium · published August 24, 2026

CVSS v3.1

5.7

EPSS

Percentile

11.1

In the wild

Unconfirmed

What it is

Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.

The record

Technical detail

CVSS v3.1: 5.7 · MEDIUM
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0: 10.0 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS: 0.00214 · 11.1th percentile
Weakness: CWE-121 · Stack-based Buffer Overflow
Published: 2026-08-24T21:17Z

Affected products (3)

Product	Versions	Fixed in
google/nest_wifi_router_firmware	all versions	—
google/nest_wifi_point_firmware	all versions	—
google/nest_wifi_pro_firmware	all versions	—

References (1)

https://support.google.com/product-documentation/answer/17072818?hl=en&ref_topic=12974021&sjid=16276349370796658455-NC · [email protected]

EPSS history

Timeline

26 AUG 06:56Z
EPSS moved — → 0%
epss
24 AUG 16:38Z
Multiple vulnerabilities exist in OpenThread's handling of MLE packets
cvelistv5