Advisories · Technology
espressif esp-idf.
Every CVE that names espressif esp-idf among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary
- espressif esp-idf
- Memory corruption
- CVSS 7.4 High
ESP-IDF: Stack-based memory corruption in lwIP DNS/SNTP handling for multi-IP DNS responses
- espressif esp-idf
- Memory corruption
- CVSS 7.1 High
ESP-IDF: Stack-Based Out-of-Bounds Write in Thread Border Router ND6 Option Parsing
- espressif esp-idf
- Memory corruption
- CVSS 6.5 Medium
ESF-IDF: Bluetooth Classic L2CAP Heap Memory Disclosure Allowing Unauthorized Access to Sensitive Data
- espressif esp-idf
- Memory corruption
- CVSS 4.3 Medium
ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing
- espressif esp-idf
- Memory corruption
- CVSS 7.5 High
ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing
- espressif esp-idf
- Memory corruption
- CVSS 4.6 Medium
ESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser
- espressif esp-idf
- Memory corruption
- CVSS 7.1 High
ESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth
- espressif esp-idf
- Memory corruption
- CVSS 7.1 High
ESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers
- espressif esp-idf
- Memory corruption
- Information disclosure
- CVSS 9.3 CriticalCritical · CVSS 9+
ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers
- espressif esp-idf
- Memory corruption
- CWE-20
- CVSS 6.5 Medium
ESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parser
- espressif esp-idf
- Memory corruption
- CVSS 7.5 High
ESF-IDF: Remote Null Pointer Dereference in WebSocket Server
- espressif esp-idf
- Memory corruption
- CVSS 6.3 Medium
ESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning
- espressif esp-idf
- Memory corruption
- CVSS 6.3 Medium
ESF-IDF Has Use-after-free Vulnerability in BLE Provisioning
- espressif esp-idf
- Memory corruption
- CVSS 6.3 Medium
ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow
- espressif esp-idf
- Memory corruption
- CVSS 6.1 Medium
ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling
- espressif esp-idf
- Memory corruption
- CVSS 0.0 None
ESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handling
- espressif esp-idf
- Memory corruption
- CVSS 2.7 Low
ESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling
- espressif esp-idf
- Memory corruption
- CVSS 6.9 Medium
ESP32-P4 JPEG Decoder Header Parsing Vulnerability
- espressif esp-idf
- Memory corruption
- CVSS 6.9 Medium
ESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability
- espressif esp-idf
- CWE-754
- CVSS 5.2 Medium
ESF-IDF BluFi Example Memory Overflow Vulnerability
- espressif esp-idf
- Memory corruption
- CVSS 7.2 High
ESP-NOW Integer Underflow Vulnerability Advisory
- espressif esp-idf
- Memory corruption
- CVSS 6.6 Medium
AES/CBC Constant IV Vulnerability in ESPTouch v2
- espressif esp-idf
- Weak cryptography or TLS
- CWE-909
- CVSS 6.1 Medium
Anti Rollback bypass with physical access and TOCTOU attack
- espressif esp-idf
- Race condition
- CVSS 7.5 High
Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption
- espressif esp-idf
- Memory corruption