CVE-2025-36939
published 2026-08-24CVE-2025-36939: Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted…
PriorityP426medium5.7CVSS 3.1
AVAACLPRLUINSUCNINAH
EPSS
0.21%
11.1th percentile
Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nest | — | — | |
| nest_wifi_point_firmware | — | — | |
| nest_wifi_pro_firmware | — | — | |
| nest_wifi_router_firmware | — | — |
CVSS provenance
nvdv3.15.7MEDIUMCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv4.010.0CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Google Nest 3.78.518349 MLE stack-based overflow
vuldb·2026-09-25·CVSS 5.7
CVE-2025-36939 [MEDIUM] Google Nest 3.78.518349 MLE stack-based overflow
A vulnerability classified as problematic was found in Google Nest 3.78.518349. The affected element is an unknown function of the component MLE Handler. Such manipulation leads to stack-based buffer overflow.
This vulnerability is referenced as CVE-2025-36939. It is possible to launch the attack remotely. No exploit is available.
GHSA
Multiple vulnerabilities exist in OpenThread's handling of MLE packets.
ghsa_unreviewed·2026-08-24
CVE-2025-36939 [CRITICAL] CWE-121 Multiple vulnerabilities exist in OpenThread's handling of MLE packets.
Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-24
Published