Skip to content
CodeAuditAgent

CVE-2025-36939

Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.

Weakness

Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.

Affected products

  • google nest_wifi_router_firmware
  • google nest_wifi_router
  • google nest_wifi_point_firmware
  • google nest_wifi_point
  • google nest_wifi_pro_firmware
  • google nest_wifi_pro

References

Find the bug before an attacker does.

Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.