Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2025-36939

Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Google_Devices

Description

Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Google Nest

Default version status: unaffected

  • 3.78.518349affected

References