AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

GoogleCVE-2025-36939

Google Nest: denial of service

Google

CVE-2025-36939 · Published Aug 24, 2026 · updated Oct 7, 2026

Critical10.0
No fix yet
Google advisory

Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.

Affected versions

PackageAffectedFixed in
Nest
Product
<= 3.78.518349No fix yet
Details and references
CVSS 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-121

More Google advisories

All Google
Medium 4.3Aug 25Google Chrome: information disclosureCVE-2026-78896fixed in 152.0.7977.65Medium 4.3Aug 25Google Chrome: information disclosureCVE-2026-78895fixed in 152.0.7977.65Low 3.1Aug 25Google Chrome: race conditionCVE-2026-78894fixed in 152.0.7977.65Medium 6.5Aug 25Google Chrome: information disclosureCVE-2026-78893fixed in 152.0.7977.65High 7.1Aug 25Google Chrome: improper authorizationCVE-2026-78892fixed in 152.0.7977.65High 8.8Aug 24Google Android: use after freeCVE-2025-36940no fix yet