Vulnerability · Published Nov 21, 2025 · Assigned by GitHub_M

CVE-2025-65092ESP32-P4 JPEG Decoder Header Parsing Vulnerability

Medium 6.9

In plain English

A medium-severity out-of-bounds read in esp-idf from espressif. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).

Severity (CVSS 4.0)6.9Medium

Exploit odds (30 days)0.4%top 67.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.1, 5.4.3, and 5.3.4, when the ESP32-P4 uses its hardware JPEG decoder, the software parser lacks necessary validation checks. A specially crafted (malicious) JPEG image could exploit the parsing routine and trigger an out-of-bounds array access. This issue has been fixed in versions 5.5.2, 5.4.4, and 5.3.5. At time of publication versions 5.5.2, 5.4.4, and 5.3.5 have not been released but are fixed respectively in commits 4b8f585, c79cb4d, and 34e2726.

Affected products (as reported)

Vendor	Product	Versions
espressif	esp-idf	= 5.5.1= 5.4.3= 5.3.4

Weakness: CWE-125, CWE-191 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References

https://github.com/espressif/esp-idf/security/advisories/GHSA-vcw6-jc3p-4gj8 x_refsource_CONFIRM
https://github.com/espressif/esp-idf/commit/34e2726254201988e6e2752b2db4b70d73964d4c x_refsource_MISC
https://github.com/espressif/esp-idf/commit/4b8f5859dbe05d15372558f8a950b49f6ee44e42 x_refsource_MISC
https://github.com/espressif/esp-idf/commit/c38a6691b9845ac6ee0d0f6713783114770cdc17 x_refsource_MISC
https://github.com/espressif/esp-idf/commit/c79cb4de468854937a0cbf82629fd65d04bffb27 x_refsource_MISC