agentprime: espressif-esp-idfEvery new CVE for espressif-esp-idf.https://agentprime.io/CVE-2026-113780: ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundaryhttps://agentprime.io/advisories/CVE-2026-113780/https://agentprime.io/advisories/CVE-2026-113780/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 19:04:21 GMTCVEcriticalCVE-2026-113783: ESP-IDF: Stack-based memory corruption in lwIP DNS/SNTP handling for multi-IP DNS responseshttps://agentprime.io/advisories/CVE-2026-113783/https://agentprime.io/advisories/CVE-2026-113783/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 19:04:16 GMTCVECVE-2026-113782: ESP-IDF: Stack-Based Out-of-Bounds Write in Thread Border Router ND6 Option Parsinghttps://agentprime.io/advisories/CVE-2026-113782/https://agentprime.io/advisories/CVE-2026-113782/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 18:59:12 GMTCVECVE-2026-81507: ESF-IDF: Bluetooth Classic L2CAP Heap Memory Disclosure Allowing Unauthorized Access to Sensitive Datahttps://agentprime.io/advisories/CVE-2026-81507/https://agentprime.io/advisories/CVE-2026-81507/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 15:12:01 GMTCVECVE-2026-81508: ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processinghttps://agentprime.io/advisories/CVE-2026-81508/https://agentprime.io/advisories/CVE-2026-81508/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 17:52:54 GMTCVECVE-2026-55687: ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsinghttps://agentprime.io/advisories/CVE-2026-55687/https://agentprime.io/advisories/CVE-2026-55687/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 15:59:31 GMTCVECVE-2026-46532: ESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parserhttps://agentprime.io/advisories/CVE-2026-46532/https://agentprime.io/advisories/CVE-2026-46532/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 00:35:30 GMTCVECVE-2026-45542: ESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetoothhttps://agentprime.io/advisories/CVE-2026-45542/https://agentprime.io/advisories/CVE-2026-45542/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 00:34:53 GMTCVECVE-2026-45329: ESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappershttps://agentprime.io/advisories/CVE-2026-45329/https://agentprime.io/advisories/CVE-2026-45329/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 00:34:09 GMTCVECVE-2026-45328: ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappershttps://agentprime.io/advisories/CVE-2026-45328/https://agentprime.io/advisories/CVE-2026-45328/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 00:33:43 GMTCVEcriticalCVE-2026-45160: ESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parserhttps://agentprime.io/advisories/CVE-2026-45160/https://agentprime.io/advisories/CVE-2026-45160/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 00:26:34 GMTCVECVE-2026-45541: ESF-IDF: Remote Null Pointer Dereference in WebSocket Serverhttps://agentprime.io/advisories/CVE-2026-45541/https://agentprime.io/advisories/CVE-2026-45541/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 00:25:59 GMTCVECVE-2026-25508: ESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioninghttps://agentprime.io/advisories/CVE-2026-25508/https://agentprime.io/advisories/CVE-2026-25508/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Feb 2026 17:58:28 GMTCVECVE-2026-25507: ESF-IDF Has Use-after-free Vulnerability in BLE Provisioninghttps://agentprime.io/advisories/CVE-2026-25507/https://agentprime.io/advisories/CVE-2026-25507/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Feb 2026 17:58:18 GMTCVECVE-2026-25532: ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflowhttps://agentprime.io/advisories/CVE-2026-25532/https://agentprime.io/advisories/CVE-2026-25532/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Feb 2026 17:58:08 GMTCVECVE-2025-68474: ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handlinghttps://agentprime.io/advisories/CVE-2025-68474/https://agentprime.io/advisories/CVE-2025-68474/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Dec 2025 23:57:54 GMTCVECVE-2025-68473: ESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handlinghttps://agentprime.io/advisories/CVE-2025-68473/https://agentprime.io/advisories/CVE-2025-68473/CVSS 0.0 (None). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Dec 2025 23:54:47 GMTCVECVE-2025-66409: ESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handlinghttps://agentprime.io/advisories/CVE-2025-66409/https://agentprime.io/advisories/CVE-2025-66409/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Dec 2025 18:09:03 GMTCVECVE-2025-65092: ESP32-P4 JPEG Decoder Header Parsing Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-65092/https://agentprime.io/advisories/CVE-2025-65092/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Nov 2025 21:33:03 GMTCVECVE-2025-64342: ESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-64342/https://agentprime.io/advisories/CVE-2025-64342/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Nov 2025 17:21:01 GMTCVECVE-2025-55297: ESF-IDF BluFi Example Memory Overflow Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-55297/https://agentprime.io/advisories/CVE-2025-55297/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 Aug 2025 15:05:06 GMTCVECVE-2025-52471: ESP-NOW Integer Underflow Vulnerability Advisoryhttps://agentprime.io/advisories/CVE-2025-52471/https://agentprime.io/advisories/CVE-2025-52471/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Jun 2025 19:53:06 GMTCVECVE-2024-53845: AES/CBC Constant IV Vulnerability in ESPTouch v2https://agentprime.io/advisories/CVE-2024-53845/https://agentprime.io/advisories/CVE-2024-53845/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Dec 2024 22:35:48 GMTCVECVE-2024-28183: Anti Rollback bypass with physical access and TOCTOU attackhttps://agentprime.io/advisories/CVE-2024-28183/https://agentprime.io/advisories/CVE-2024-28183/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 Mar 2024 14:31:28 GMTCVECVE-2022-24893: Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruptionhttps://agentprime.io/advisories/CVE-2022-24893/https://agentprime.io/advisories/CVE-2022-24893/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 25 Jun 2022 06:55:09 GMTCVE