Vulnerabilities

TI-2026-34216 CVE-2026-46532

ESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser

LOW 21

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1MEDIUM 4.6 Adjacent network Low privileges No interaction EPSS 0.00228 Published 2026-06-10 No fix listed CWE-125

TI-2026-33293 CVE-2026-45542

ESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth

LOW 31

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00325 Published 2026-06-10 No fix listed CWE-122

TI-2026-33126 CVE-2026-45329

ESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers

LOW 30

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00117 Published 2026-06-10 No fix listed CWE-125

TI-2026-33125 CVE-2026-45328

ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers

MEDIUM 41

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00126 Published 2026-06-10 No fix listed CWE-20

TI-2026-32988 CVE-2026-45160

ESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parser

LOW 28

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00246 Published 2026-06-10 No fix listed CWE-125

TI-2026-33292 CVE-2026-45541

ESF-IDF: Remote Null Pointer Dereference in WebSocket Server

LOW 39

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00439 Published 2026-06-10 No fix listed CWE-476

TI-2026-20618 CVE-2026-25508

ESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning

LOW 28

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1MEDIUM 6.3 Adjacent network No auth User interaction EPSS 0.00238 Published 2026-02-04 No fix listed CWE-125

TI-2026-20617 CVE-2026-25507

ESF-IDF Has Use-after-free Vulnerability in BLE Provisioning

LOW 28

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1MEDIUM 6.3 Adjacent network No auth User interaction EPSS 0.00231 Published 2026-02-04 No fix listed CWE-416

TI-2026-20641 CVE-2026-25532

ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow

LOW 34

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00248 Published 2026-02-04 No fix listed CWE-191

TI-2025-42004 CVE-2025-68474

ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling

LOW 27

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 4.0MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.00316 Published 2025-12-26 No fix listed CWE-787

TI-2025-42003 CVE-2025-68473

ESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handling

LOW 9

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 4.0N/A 0.0 Network No auth No interaction EPSS 0.00409 Published 2025-12-26 No fix listed CWE-787

TI-2025-40845 CVE-2025-66409

ESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling

LOW 21

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 4.0LOW 2.7 Network No auth No interaction EPSS 0.00679 Published 2025-12-02 No fix listed CWE-125

TI-2025-34953 CVE-2025-55297

ESF-IDF BluFi Example Memory Overflow Vulnerability

LOW 26

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 4.0MEDIUM 5.2 Adjacent network No auth No interaction EPSS 0.00358 Published 2025-08-21 Fixed in 5.0.9, 5.1.6 +2 CWE-120

TI-2025-32598 CVE-2025-52471

ESP-NOW Integer Underflow Vulnerability Advisory

MEDIUM 41

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 4.0HIGH 7.2 Network No auth No interaction EPSS 0.00914 Published 2025-06-24 No fix listed CWE-191

TI-2024-35792 CVE-2024-53406 · GHSA-rcc9-57x7-m8wm

Espressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in…

LOW 39

Espressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in Authentication bypass.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00643 Published 2025-03-13 No fix listed CWE-639

TI-2024-34366 CVE-2024-51428 · GHSA-6mm9-jjjf-pcj3

An issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service (DoS)…

LOW 39

An issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service (DoS) via a crafted data channel packet.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00531 Published 2024-11-07 No fix listed CWE-770

TI-2024-22075 CVE-2024-33453 · GHSA-34j4-xx25-wcxg

Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain…

LOW 39

Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive information via the externalId component.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00967 Published 2024-10-17 No fix listed CWE-120

TI-2024-22076 CVE-2024-33454 · GHSA-r3pj-479m-vpg2

Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute…

MEDIUM 64

Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the Bluetooth stack component.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.01127 Published 2024-05-09 No fix listed CWE-120

TI-2024-18759 CVE-2024-28183

Anti Rollback bypass with physical access and TOCTOU attack

LOW 27

ESP-IDF is the development framework for Espressif SoCs supported on Windows, Linux and macOS.

CVSS 3.1MEDIUM 6.1 Physical No auth No interaction EPSS 0.00225 Published 2024-03-25 Fixed in 4.4.7, 5.2.1 CWE-367

TI-2022-08703 CVE-2022-24893

Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption

MEDIUM 41

ESP-IDF is the official development framework for Espressif SoCs.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00534 Published 2022-06-25 Fixed in 4.1.4 CWE-787

TI-2021-09371 CVE-2021-28139 · GHSA-jr8m-qx83-r6p3

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not…

MEDIUM 41

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet, allowing attackers in radio range to trigge…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01401 Published 2021-09-07 No fix listed

TI-2021-09369 CVE-2021-28135 · GHSA-jff7-h8x2-v2hj

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not…

LOW 30

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service (…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00827 Published 2021-09-07 No fix listed

TI-2021-09370 CVE-2021-28136 · GHSA-w488-94f6-hhmr

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not…

LOW 30

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of multiple LMP IO Capability Request packets during the pairing process, allowing attackers in radio range…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00844 Published 2021-09-07 No fix listed CWE-787

TI-2020-12700 CVE-2020-16146 · GHSA-2wq8-q24x-h8rw

Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.7, 3.2.x through 3.2.3…

LOW 36

Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.7, 3.2.x through 3.2.3, 3.3.x through 3.3.2, and 4.0.x through 4.0.1 has a Buffer Overflow in BluFi provisioning in btc_blufi_recv_handler function in blufi_p…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01398 Published 2021-01-12 No fix listed CWE-120

TI-2020-10673 CVE-2020-13595 · GHSA-h45x-9jw8-5x6p

The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.0 through…

LOW 30

The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.0 through 4.2 (for ESP32 devices) returns the wrong number of completed BLE packets and triggers a reachable assertion on the host stack whe…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00877 Published 2020-08-31 No fix listed CWE-617

Vulnerabilities

Filters