Espressif Esp-idf vulnerabilities

• espressif esp-idf ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary CVE-2026-113780 9.3 CriticalNovember 4, 2026
• espressif esp-idf ESP-IDF: Stack-based memory corruption in lwIP DNS/SNTP handling for multi-IP DNS responses CVE-2026-113783 7.4 HighNovember 4, 2026
• espressif esp-idf ESP-IDF: Stack-Based Out-of-Bounds Write in Thread Border Router ND6 Option Parsing CVE-2026-113782 7.1 HighNovember 4, 2026
• espressif esp-idf ESF-IDF: Bluetooth Classic L2CAP Heap Memory Disclosure Allowing Unauthorized Access to Sensitive Data CVE-2026-81507 6.5 MediumOctober 13, 2026
• espressif esp-idf ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing CVE-2026-81508 4.3 MediumSeptember 24, 2026
• espressif esp-idf ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing CVE-2026-55687 7.5 HighJuly 10, 2026
• espressif esp-idf ESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser CVE-2026-46532 4.6 MediumJune 10, 2026
• espressif esp-idf ESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth CVE-2026-45542 7.1 HighJune 10, 2026
• espressif esp-idf ESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers CVE-2026-45329 7.1 HighJune 10, 2026
• espressif esp-idf ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers CVE-2026-45328 9.3 CriticalJune 10, 2026
• espressif esp-idf ESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parser CVE-2026-45160 6.5 MediumJune 10, 2026
• espressif esp-idf ESF-IDF: Remote Null Pointer Dereference in WebSocket Server CVE-2026-45541 7.5 HighJune 10, 2026
• espressif esp-idf ESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning CVE-2026-25508 6.3 MediumFebruary 4, 2026
• espressif esp-idf ESF-IDF Has Use-after-free Vulnerability in BLE Provisioning CVE-2026-25507 6.3 MediumFebruary 4, 2026
• espressif esp-idf ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow CVE-2026-25532 6.3 MediumFebruary 4, 2026
• espressif esp-idf ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling CVE-2025-68474 6.1 MediumDecember 26, 2025
• espressif esp-idf ESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handling CVE-2025-68473 0.0 NoneDecember 26, 2025
• espressif esp-idf ESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling CVE-2025-66409 2.7 LowDecember 2, 2025
• espressif esp-idf ESP32-P4 JPEG Decoder Header Parsing Vulnerability CVE-2025-65092 6.9 MediumNovember 21, 2025
• espressif esp-idf ESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability CVE-2025-64342 6.9 MediumNovember 17, 2025
• espressif esp-idf ESF-IDF BluFi Example Memory Overflow Vulnerability CVE-2025-55297 5.2 MediumAugust 21, 2025
• espressif esp-idf ESP-NOW Integer Underflow Vulnerability Advisory CVE-2025-52471 7.2 HighJune 24, 2025
• espressif esp-idf Espressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in Authentication bypass... CVE-2024-53406 8.8 HighMarch 13, 2025
• espressif esp-idf AES/CBC Constant IV Vulnerability in ESPTouch v2 CVE-2024-53845 6.6 MediumDecember 11, 2024
• expressif esp idf, espressif esp-idf +1 more An issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service (DoS) via a... CVE-2024-51428 Public exploit 7.5 HighNovember 7, 2024
• espressif esp-idf Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive... CVE-2024-33453 Public exploit 8.1 HighOctober 17, 2024
• espressif esp-idf Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code... CVE-2024-33454 6.5 MediumMay 9, 2024
• espressif esp-idf Anti Rollback bypass with physical access and TOCTOU attack CVE-2024-28183 6.1 MediumMarch 25, 2024
• espressif esp-idf Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption CVE-2022-24893 7.5 HighJune 25, 2022
• espressif esp-idf The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly... CVE-2021-28139 8.8 HighSeptember 7, 2021
• espressif esp-idf The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly... CVE-2021-28135 6.5 MediumSeptember 7, 2021
• espressif esp-idf The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly... CVE-2021-28136 6.5 MediumSeptember 7, 2021
• espressif esp-idf Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.7, 3.2.x through 3.2.3, 3.3.x... CVE-2020-16146 7.5 HighJanuary 12, 2021
• espressif esp-idf The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.0 through 4.2 ... CVE-2020-13595 6.5 MediumAugust 31, 2020
• espressif esp-idf The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.2 and earlier ... CVE-2020-13594 6.5 MediumAugust 31, 2020
• espressif esp-idf, esp8266 nonos sdk, esp8266 rtos sdk +2 more An encryption-bypass issue was discovered on Espressif ESP-IDF devices through 4.2,... CVE-2020-12638 6.8 MediumJuly 23, 2020
• espressif esp-idf An issue was discovered in Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x... CVE-2019-15894 6.8 MediumOctober 7, 2019
• espressif esp-idf, arduino-esp32, esp8266 nonos sdk +2 more The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0... CVE-2019-12586 Public exploit 6.5 MediumSeptember 4, 2019
• espressif esp-idf, esp8266 nonos sdk +1 more The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0... CVE-2019-12587 8.1 HighSeptember 4, 2019
• espressif esp-idf An issue was discovered in Espressif ESP-IDF 2.x and 3.x before 3.0.6 and 3.1.x before 3.1.1.... CVE-2018-18558 6.4 MediumMay 13, 2019