Espressif vulnerabilities

Products

• Esp-idf 40
• Arduino-esp32 7
• Esp8266 Nonos Sdk 4
• Esp-usb 3
• Esp32 Firmware 2
• Esp32-pico-d4 Firmware 2
• Esp-now 2
• Usb Host Hid Driver 2

Newest

• espressif esp-idf ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary CVE-2026-113780 9.3 CriticalNovember 4, 2026
• espressif esp-idf ESP-IDF: Stack-based memory corruption in lwIP DNS/SNTP handling for multi-IP DNS responses CVE-2026-113783 7.4 HighNovember 4, 2026
• espressif esp-idf ESP-IDF: Stack-Based Out-of-Bounds Write in Thread Border Router ND6 Option Parsing CVE-2026-113782 7.1 HighNovember 4, 2026
• espressif esp-protocols espressif/mdns has Uncontrolled Recursion in mDNS Name Decompression CVE-2026-64860 6.5 MediumOctober 30, 2026
• espressif esp-idf ESF-IDF: Bluetooth Classic L2CAP Heap Memory Disclosure Allowing Unauthorized Access to Sensitive Data CVE-2026-81507 6.5 MediumOctober 13, 2026
• espressif esp-idf ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing CVE-2026-81508 4.3 MediumSeptember 24, 2026
• espressif esp-idf ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing CVE-2026-55687 7.5 HighJuly 10, 2026
• espressif esp-idf ESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser CVE-2026-46532 4.6 MediumJune 10, 2026
• espressif esp-idf ESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth CVE-2026-45542 7.1 HighJune 10, 2026
• espressif esp-idf ESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers CVE-2026-45329 7.1 HighJune 10, 2026
• espressif esp-idf ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers CVE-2026-45328 9.3 CriticalJune 10, 2026
• espressif esp-idf ESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parser CVE-2026-45160 6.5 MediumJune 10, 2026
• espressif esp-idf ESF-IDF: Remote Null Pointer Dereference in WebSocket Server CVE-2026-45541 7.5 HighJune 10, 2026
• espressif shared-github-dangerjs Espressif Shared GitHub DangerJS: Untrusted Search Path in DangerJS Action Entrypoint CVE-2026-44358 8.2 HighMay 28, 2026
• espressif arduino-esp32 arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCE CVE-2026-42854 9.8 CriticalMay 12, 2026
• espressif arduino-esp32 arduino-esp32: Digest authentication URI mismatch bypass in WebServer allows cross-resource replay attack CVE-2026-42855 7.5 HighMay 12, 2026
• espressif arduino-esp32 Improper validation of NBNS name_len in arduino-esp32 NetBIOS leads to memory corruption CVE-2026-41429 8.8 HighApril 24, 2026
• espressif esp-idf ESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning CVE-2026-25508 6.3 MediumFebruary 4, 2026
• espressif esp-idf ESF-IDF Has Use-after-free Vulnerability in BLE Provisioning CVE-2026-25507 6.3 MediumFebruary 4, 2026
• espressif esp-idf ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow CVE-2026-25532 6.3 MediumFebruary 4, 2026
• espressif esp-usb, usb host hid driver +1 more espressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path CVE-2025-68657 6.4 MediumJanuary 12, 2026
• espressif esp-usb, usb host hid driver +1 more Espressif ESP-IDF USB Host HID (Human Interface Device) Driver Descriptor Use-After-Free Vulnerability CVE-2025-68656 6.8 MediumJanuary 12, 2026
• espressif esp-usb, usb host uvc class driver +1 more Espressif ESP-IDF USB Host UVC Class Driver has a stack buffer overflow in UVC descriptor printing CVE-2025-68622 6.8 MediumJanuary 12, 2026
• espressif esp-idf ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling CVE-2025-68474 6.1 MediumDecember 26, 2025
• espressif esp-idf ESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handling CVE-2025-68473 0.0 NoneDecember 26, 2025
• espressif esp-idf ESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling CVE-2025-66409 2.7 LowDecember 2, 2025
• espressif esp-idf ESP32-P4 JPEG Decoder Header Parsing Vulnerability CVE-2025-65092 6.9 MediumNovember 21, 2025
• espressif esp-idf ESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability CVE-2025-64342 6.9 MediumNovember 17, 2025
• espressif esp-idf ESF-IDF BluFi Example Memory Overflow Vulnerability CVE-2025-55297 5.2 MediumAugust 21, 2025
• espressif arduino-esp32 CSRF Vulnerability in Firmware Update Endpoints Allows Remote Code Execution CVE-2025-53540 8.7 HighJuly 7, 2025
• espressif arduino-esp32 arduino-esp32 vulnerable to CRLF injection in WebServer.cpp CVE-2025-53007 8.9 HighJune 26, 2025
• espressif esp-idf ESP-NOW Integer Underflow Vulnerability Advisory CVE-2025-52471 7.2 HighJune 24, 2025
• espressif esp-idf Espressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in Authentication bypass... CVE-2024-53406 8.8 HighMarch 13, 2025
• espressif esp32, esp32 firmware +1 more Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory). CVE-2025-27840 Public exploit 6.8 MediumMarch 8, 2025
• espressif esp-idf AES/CBC Constant IV Vulnerability in ESPTouch v2 CVE-2024-53845 6.6 MediumDecember 11, 2024
• expressif esp idf, espressif esp-idf +1 more An issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service (DoS) via a... CVE-2024-51428 Public exploit 7.5 HighNovember 7, 2024
• espressif esp-idf Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive... CVE-2024-33453 Public exploit 8.1 HighOctober 17, 2024
• arduino core, espressif arduino-esp32 +1 more Multiple Poisoned Pipeline Execution (PPE) vulnerabilities CVE-2024-45798 Public exploit 10.0 CriticalSeptember 17, 2024
• espressif esp-now ESP-NOW Replay Attacks Vulnerability CVE-2024-42483 6.5 MediumSeptember 12, 2024
• espressif esp-now ESP-NOW OOB Vulnerability In Group Type Message CVE-2024-42484 6.5 MediumSeptember 12, 2024
• espressif esp-idf Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code... CVE-2024-33454 6.5 MediumMay 9, 2024
• espressif esp-idf Anti Rollback bypass with physical access and TOCTOU attack CVE-2024-28183 6.1 MediumMarch 25, 2024
• espressif esptool esptool allows attackers to view sensitive information via weak cryptographic algorithm CVE-2023-46894 7.5 HighNovember 9, 2023
• espressif esp-eye firmware, esp32-d0wd-v3 firmware, esp32-d0wdr2-v3 firmware +19 more +21 more An issue was discovered on Espressif ESP32 3.0 (ESP32_rev300 ROM) devices. An EMFI attack on ECO3... CVE-2023-35818 6.8 MediumJuly 17, 2023
• espressif esp-idf Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption CVE-2022-24893 7.5 HighJune 25, 2022
• espressif esp-idf The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly... CVE-2021-28139 8.8 HighSeptember 7, 2021
• espressif esp-idf The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly... CVE-2021-28135 6.5 MediumSeptember 7, 2021
• espressif esp-idf The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly... CVE-2021-28136 6.5 MediumSeptember 7, 2021
• espressif esp32 firmware An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of... CVE-2021-34173 7.5 HighJuly 14, 2021
• espressif esp-idf Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.7, 3.2.x through 3.2.3, 3.3.x... CVE-2020-16146 7.5 HighJanuary 12, 2021
• Show olderLoading…