Buffer overflow in Google Nest
CVE-2025-36939
Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.
Vulnerability class: Buffer Overflow
Affected products
- Google Nest — versions 3.78.518349
Weakness classification (CWE)
References
- dsap-vuln-management@google.com (vendor-advisory)