CVE-2025-7964: Silabs.com Silicon Labs Zigbee Stack

Critical severity, CVSS 9.2. EPSS: 0.3% chance of exploitation in the next 30 days.

After receiving a malformed 802.15.4 MAC Data Request the Zigbee Coordinator sends a ‘network leave’ request to Zigbee router resulting in the Zigbee Router getting stuck in a non-rejoinable state. If a suitable parent is not available, the end devices will be unable to rejoin. A manual recommissioning is required to recover the Zigbee Router.

Affected products

• Silabs.com Silicon Labs Zigbee Stack: up to and including 4.4.6; up to and including 2025.6.1

Published 2026-01-30. Last modified 2026-06-17.