Advisories · Technology
espressif arduino-esp32.
Every CVE that names espressif arduino-esp32 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCE
- espressif arduino-esp32
- Memory corruption
- CVSS 7.5 High
arduino-esp32: Digest authentication URI mismatch bypass in WebServer allows cross-resource replay attack
- espressif arduino-esp32
- Authentication bypass
- CVSS 8.8 High
Improper validation of NBNS name_len in arduino-esp32 NetBIOS leads to memory corruption
- espressif arduino-esp32
- Memory corruption
- CVSS 8.7 High
CSRF Vulnerability in Firmware Update Endpoints Allows Remote Code Execution
- espressif arduino-esp32
- Cross-site request forgery (CSRF)
- CVSS 8.9 High
arduino-esp32 vulnerable to CRLF injection in WebServer.cpp
- espressif arduino-esp32
- Other injection
- CVSS 10.0 CriticalCritical · CVSS 9+
Multiple Poisoned Pipeline Execution (PPE) vulnerabilities
- espressif arduino-esp32
- Command injection
- Code injection