CVE-2026-3555
Awaiting Analysis Awaiting Analysis - Queue
Heap-Based Buffer Overflow in Philips Hue Bridge Enables RCE

Publication date: 2026-03-16

Last updated on: 2026-04-27

Assigner: Zero Day Initiative

Description
Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. User interaction is required to exploit this vulnerability in that the user must initiate the device pairing process. The specific flaw exists within the handling of custom Zigbee ZCL frames in the Model Info download functionality. The issue results from the lack of proper validation of the size of data prior to copying it to a fixed-size heap buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28276.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-16
Last Modified
2026-04-27
Generated
2026-05-07
AI Q&A
2026-03-16
EPSS Evaluated
2026-05-05
NVD
EUVD
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
philips hue_bridge_v2_firmware to 1975170000 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-122 A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists in the Philips Hue Bridge Zigbee Stack, specifically in the custom command handler related to the Model Info download functionality. It is a heap-based buffer overflow caused by improper validation of data size before copying it into a fixed-size heap buffer. An attacker who is network-adjacent can exploit this flaw by initiating the device pairing process, which requires user interaction, to execute arbitrary code on the affected device.


How can this vulnerability impact me? :

This vulnerability can allow an attacker to execute arbitrary code on the Philips Hue Bridge device. This means the attacker could potentially take control of the device, leading to unauthorized actions such as manipulating connected smart home devices, disrupting services, or using the device as a foothold for further attacks within the network.


How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:

I don't know


How can this vulnerability be detected on my network or system? Can you suggest some commands?

I don't know


What immediate steps should I take to mitigate this vulnerability?

I don't know


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart