Advisories · Technology
ESP32Async ESPAsyncWebServer.
Every CVE that names ESP32Async ESPAsyncWebServer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
ESPAsyncWebServer multipart parser has null-pointer write
- ESP32Async ESPAsyncWebServer
- Memory corruption
- CWE-672
- CVSS 8.7 High
ESPAsyncWebServer: Integer overflow in multipart boundary parser causes denial of service
- ESP32Async ESPAsyncWebServer
- Memory corruption
- CVSS 8.7 High
ESPAsyncWebServer Vulnerable to CRLF Injection in AsyncWebHeader.cpp
- ESP32Async ESPAsyncWebServer
- Other injection