CVE-2025-36939
CriticalCVSS 10.0Summary
Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.
Risk Assessment
An attacker can disrupt devices using OpenThread, potentially leading to service unavailability or device crashes.
Recommendation
Update OpenThread to the latest version that includes fixes for these vulnerabilities.
Original NVD description (English source)
Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.