Espressif

Products

Exploited and recent CVEs

• CVE-2026-64860 Medium 6.5 espressif/mdns has Uncontrolled Recursion in mDNS Name Decompression 0.3%
• CVE-2026-113780 Critical 9.3 ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary 0.1%
• CVE-2026-113783 High 7.4 ESP-IDF: Stack-based memory corruption in lwIP DNS/SNTP handling for multi-IP DNS responses 0.4%
• CVE-2026-113782 High 7.1 ESP-IDF: Stack-Based Out-of-Bounds Write in Thread Border Router ND6 Option Parsing 0.3%
• CVE-2026-81507 Medium 6.5 ESF-IDF: Bluetooth Classic L2CAP Heap Memory Disclosure Allowing Unauthorized Access to Sensitive Data 0.3%
• CVE-2026-81508 Medium 4.3 ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing 0.2%
• CVE-2026-55687 High 7.5 ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing 0.7%
• CVE-2026-46532 Medium 4.6 ESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser 0.2%
• CVE-2026-45542 High 7.1 ESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth 0.3%
• CVE-2026-45329 High 7.1 ESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers 0.1%
• CVE-2026-45328 Critical 9.3 ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers 0.1%
• CVE-2026-45160 Medium 6.5 ESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parser 0.2%
• CVE-2026-45541 High 7.5 ESF-IDF: Remote Null Pointer Dereference in WebSocket Server 0.4%
• CVE-2026-44358 High 8.2 Espressif Shared GitHub DangerJS: Untrusted Search Path in DangerJS Action Entrypoint 0.2%
• CVE-2026-42854 Critical 9.8 arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCE 0.6%
• CVE-2026-42855 High 7.5 arduino-esp32: Digest authentication URI mismatch bypass in WebServer allows cross-resource replay attack 0.4%
• CVE-2026-41429 High 8.8 Improper validation of NBNS name_len in arduino-esp32 NetBIOS leads to memory corruption 0.3%
• CVE-2026-25508 Medium 6.3 ESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning 0.2%
• CVE-2026-25507 Medium 6.3 ESF-IDF Has Use-after-free Vulnerability in BLE Provisioning 0.2%
• CVE-2026-25532 Medium 6.3 ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow 0.2%
• CVE-2025-68657 Medium 6.4 espressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path 0.2%
• CVE-2025-68656 Medium 6.8 Espressif ESP-IDF USB Host HID (Human Interface Device) Driver Descriptor Use-After-Free Vulnerability 0.2%
• CVE-2025-68622 Medium 6.8 Espressif ESP-IDF USB Host UVC Class Driver has a stack buffer overflow in UVC descriptor printing 0.2%
• CVE-2025-68474 Medium 6.1 ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling 0.3%
• CVE-2025-68473 None 0.0 ESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handling 0.4%
• CVE-2025-66409 Low 2.7 ESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling 0.7%
• CVE-2025-65092 Medium 6.9 ESP32-P4 JPEG Decoder Header Parsing Vulnerability 0.4%
• CVE-2025-64342 Medium 6.9 ESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability 0.4%
• CVE-2025-55297 Medium 5.2 ESF-IDF BluFi Example Memory Overflow Vulnerability 0.4%
• CVE-2025-53540 High 8.7 CSRF Vulnerability in Firmware Update Endpoints Allows Remote Code Execution 0.3%