Vulnerabilities

TI-2026-85442 CVE-2026-64860

Uncontrolled recursion in espressif/mdns enables denial of service

LOW 29

ESP-Protocols is a collection of protocol components for ESP-IDF.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00319 Published 2026-11-05 Fixed in 1.11.2 CWE-400

TI-2026-85138 CVE-2026-113780

Unvalidated stack pointer at ESP-TEE boundary in esp-idf

MEDIUM 41

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00141 Published 2026-11-04 Fixed in 5.5.6, 6.0.4 +1 CWE-787

TI-2026-85139 CVE-2026-113783

ESP-IDF: Stack-based memory corruption in lwIP DNS/SNTP handling for multi-IP DNS responses

LOW 32

ESP-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00351 Published 2026-11-04 Fixed in 5.3.7, 5.4.5 +2 CWE-121

TI-2026-85131 CVE-2026-113782

Stack buffer overflow in ESP-IDF Thread Border Router ND6 parsing

LOW 31

ESP-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00282 Published 2026-11-04 Fixed in 5.2.8, 5.3.6 +3 CWE-121

TI-2026-71806 CVE-2026-81507

Out-of-bounds read in ESP-IDF Bluetooth L2CAP leaks heap memory

LOW 28

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00264 Published 2026-10-13 Fixed in 5.2.8, 5.3.6 +3 CWE-125

TI-2026-56236 CVE-2026-81508

ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing

LOW 19

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00213 Published 2026-09-24 No fix listed CWE-125

TI-2026-40202 CVE-2026-55687

ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing

MEDIUM 40

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.007 Published 2026-07-10 Fixed in 6.0.2 CWE-121

TI-2026-34216 CVE-2026-46532

ESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser

LOW 21

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1MEDIUM 4.6 Adjacent network Low privileges No interaction EPSS 0.00228 Published 2026-06-10 No fix listed CWE-125

TI-2026-33293 CVE-2026-45542

ESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth

LOW 31

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00325 Published 2026-06-10 No fix listed CWE-122

TI-2026-33126 CVE-2026-45329

ESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers

LOW 30

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00117 Published 2026-06-10 No fix listed CWE-125

TI-2026-33125 CVE-2026-45328

ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers

MEDIUM 41

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00126 Published 2026-06-10 No fix listed CWE-20

TI-2026-32988 CVE-2026-45160

ESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parser

LOW 28

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00246 Published 2026-06-10 No fix listed CWE-125

TI-2026-33292 CVE-2026-45541

ESF-IDF: Remote Null Pointer Dereference in WebSocket Server

LOW 39

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00439 Published 2026-06-10 No fix listed CWE-476

TI-2026-32319 CVE-2026-44358

Espressif Shared GitHub DangerJS: Untrusted Search Path in DangerJS Action Entrypoint

LOW 35

Espressif Shared GitHub DangerJS is a reusable GitHub Action CI DangerJS workflow for Espressif GitHub projects.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00181 Published 2026-05-28 Fixed in 1.0.1 CWE-427

TI-2026-31061 CVE-2026-42854

arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCE

HIGH 82

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00571 Published 2026-05-12 Fixed in 3.3.8 CWE-121

TI-2026-31062 CVE-2026-42855

arduino-esp32: Digest authentication URI mismatch bypass in WebServer allows cross-resource replay attack

LOW 39

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00351 Published 2026-05-12 Fixed in 3.3.8 CWE-287

TI-2026-30028 CVE-2026-41429

Improper validation of NBNS name_len in arduino-esp32 NetBIOS leads to memory corruption

HIGH 73

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00307 Published 2026-04-24 Fixed in 3.3.8 CWE-121

TI-2026-20618 CVE-2026-25508

ESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning

LOW 28

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1MEDIUM 6.3 Adjacent network No auth User interaction EPSS 0.00238 Published 2026-02-04 No fix listed CWE-125

TI-2026-20617 CVE-2026-25507

ESF-IDF Has Use-after-free Vulnerability in BLE Provisioning

LOW 28

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1MEDIUM 6.3 Adjacent network No auth User interaction EPSS 0.00231 Published 2026-02-04 No fix listed CWE-416

TI-2026-20641 CVE-2026-25532

ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow

LOW 34

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00248 Published 2026-02-04 No fix listed CWE-191

TI-2025-42151 CVE-2025-68657

espressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path

LOW 30

Espressif ESP-IDF USB Host HID (Human Interface Device) Driver allows access to HID devices.

CVSS 3.1MEDIUM 6.4 Physical No auth No interaction EPSS 0.00162 Published 2026-01-12 Fixed in 1.1.0 CWE-415

TI-2025-42150 CVE-2025-68656

Espressif ESP-IDF USB Host HID (Human Interface Device) Driver Descriptor Use-After-Free Vulnerability

LOW 31

Espressif ESP-IDF USB Host HID (Human Interface Device) Driver allows access to HID devices.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00218 Published 2026-01-12 Fixed in 1.1.0 CWE-416

TI-2025-42140 CVE-2025-68622

Espressif ESP-IDF USB Host UVC Class Driver has a stack buffer overflow in UVC descriptor printing

LOW 32

Espressif ESP-IDF USB Host UVC Class Driver allows video streaming from USB cameras.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00247 Published 2026-01-12 Fixed in 2.4.0 CWE-121

TI-2025-42004 CVE-2025-68474

ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling

LOW 27

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 4.0MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.00316 Published 2025-12-26 No fix listed CWE-787

TI-2025-42003 CVE-2025-68473

ESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handling

LOW 9

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.

CVSS 4.0N/A 0.0 Network No auth No interaction EPSS 0.00409 Published 2025-12-26 No fix listed CWE-787

Vulnerabilities

Filters