CVE-2025-8414CWE-20

CVE-2025-8414

published October 17, 2025

CVSS
9.4
EPSS
0%
Percentile
18.7
In the wild
Unconfirmed
What it is

Due to improper input validation, a buffer overflow vulnerability is present in

Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain

conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerability.

The record
Technical detail
CVSS
9.4 · NONE
CVSS v4.0
Not supplied
EPSS
0.00274 · 18.7th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-10-17T20:15Z
References (1)
EPSS history
Timeline
  • 17 OCT 16:02Z
    Zigbee Green Power Host Buffer Overflow Vulnerability
    cvelistv5