CVE-2026-6432
NoneCVSS
—
EPSS
0.6%
Published
Jun 25, 2026
CISA due date
—
The record
Improper bounds validation in EmberZNet SDK versions 9.0.2 and earlier may result in crashes or dynamic memory leakage.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-15418 In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged… CWE-130
- CVE-2026-5706 In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger… CWE-130
- CVE-2026-71402 An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. CWE-130
- CVE-2026-81575 If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts… CWE-130
- CVE-2026-58097 mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation… CWE-130
- CVE-2026-58096 LcpDecodeConfig() did not validate the length of received endpoint discriminator options… CWE-130
- CVE-2026-14587 Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way… CWE-130
- CVE-2026-67292 FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability in the gateway… CWE-130