CVE-2026-47154 Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2

In EmberZNet v9.0.2 and earlier, a malformed GetProfileResponse message can trigger out-of-bounds reads while iterating interval entries and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observe...

CVE-2026-47154

CVE-2026-47154 affects EmberZNet devices using the Simple Metering cluster. A malformed GetProfileResponse in EmberZNet v9.0.2 and earlier can cause out-of-bounds reads while iterating interval entries, terminating the process. The flaw requires messages originate from a device already joined to ...

EUVD-2026-39354

In EmberZNet v9.0.2 and earlier, a malformed GetProfileResponse message can trigger out-of-bounds reads while iterating interval entries and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observe...