Espressif esp-idf

• CVE-2026-113780 Critical 9.3 ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary 0.1%
• CVE-2026-113783 High 7.4 ESP-IDF: Stack-based memory corruption in lwIP DNS/SNTP handling for multi-IP DNS responses 0.4%
• CVE-2026-113782 High 7.1 ESP-IDF: Stack-Based Out-of-Bounds Write in Thread Border Router ND6 Option Parsing 0.3%
• CVE-2026-81507 Medium 6.5 ESF-IDF: Bluetooth Classic L2CAP Heap Memory Disclosure Allowing Unauthorized Access to Sensitive Data 0.3%
• CVE-2026-81508 Medium 4.3 ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing 0.2%
• CVE-2026-55687 High 7.5 ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing 0.7%
• CVE-2026-46532 Medium 4.6 ESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser 0.2%
• CVE-2026-45542 High 7.1 ESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth 0.3%
• CVE-2026-45329 High 7.1 ESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers 0.1%
• CVE-2026-45328 Critical 9.3 ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers 0.1%
• CVE-2026-45160 Medium 6.5 ESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parser 0.2%
• CVE-2026-45541 High 7.5 ESF-IDF: Remote Null Pointer Dereference in WebSocket Server 0.4%
• CVE-2026-25508 Medium 6.3 ESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning 0.2%
• CVE-2026-25507 Medium 6.3 ESF-IDF Has Use-after-free Vulnerability in BLE Provisioning 0.2%
• CVE-2026-25532 Medium 6.3 ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow 0.2%
• CVE-2025-68474 Medium 6.1 ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling 0.3%
• CVE-2025-68473 None 0.0 ESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handling 0.4%
• CVE-2025-66409 Low 2.7 ESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling 0.7%
• CVE-2025-65092 Medium 6.9 ESP32-P4 JPEG Decoder Header Parsing Vulnerability 0.4%
• CVE-2025-64342 Medium 6.9 ESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability 0.4%
• CVE-2025-55297 Medium 5.2 ESF-IDF BluFi Example Memory Overflow Vulnerability 0.4%
• CVE-2025-52471 High 7.2 ESP-NOW Integer Underflow Vulnerability Advisory 0.9%
• CVE-2024-53845 Medium 6.6 AES/CBC Constant IV Vulnerability in ESPTouch v2 0.6%
• CVE-2024-28183 Medium 6.1 Anti Rollback bypass with physical access and TOCTOU attack 0.2%
• CVE-2022-24893 High 7.5 Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption 0.5%