Google Nest Wifi Router Firmware vulnerabilities

CVE-2024-22004 [HIGH] CWE-125 CVE-2024-22004: Due to length check, an attacker with privilege access on a Linux Nonsecure operating system can tri Due to length check, an attacker with privilege access on a Linux Nonsecure operating system can trigger a vulnerability and leak the secure memory from the Trusted Application

CVE-2024-22013 [MEDIUM] CVE-2024-22013: U-Boot environment is read from unauthenticated partition. U-Boot environment is read from unauthenticated partition.

CVE-2025-36939 [MEDIUM] CWE-121 CVE-2025-36939: Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.