Espressif Esp32 vulnerabilities

• espressif arduino-esp32 arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCE CVE-2026-42854 9.8 CriticalMay 12, 2026
• espressif arduino-esp32 arduino-esp32: Digest authentication URI mismatch bypass in WebServer allows cross-resource replay attack CVE-2026-42855 7.5 HighMay 12, 2026
• espressif arduino-esp32 Improper validation of NBNS name_len in arduino-esp32 NetBIOS leads to memory corruption CVE-2026-41429 8.8 HighApril 24, 2026
• espressif arduino-esp32 CSRF Vulnerability in Firmware Update Endpoints Allows Remote Code Execution CVE-2025-53540 8.7 HighJuly 7, 2025
• espressif arduino-esp32 arduino-esp32 vulnerable to CRLF injection in WebServer.cpp CVE-2025-53007 8.9 HighJune 26, 2025
• espressif esp32, esp32 firmware +1 more Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory). CVE-2025-27840 Public exploit 6.8 MediumMarch 8, 2025
• arduino core, espressif arduino-esp32 +1 more Multiple Poisoned Pipeline Execution (PPE) vulnerabilities CVE-2024-45798 Public exploit 10.0 CriticalSeptember 17, 2024
• espressif esp-eye firmware, esp32-d0wd-v3 firmware, esp32-d0wdr2-v3 firmware +19 more +21 more An issue was discovered on Espressif ESP32 3.0 (ESP32_rev300 ROM) devices. An EMFI attack on ECO3... CVE-2023-35818 6.8 MediumJuly 17, 2023
• espressif esp32 firmware An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of... CVE-2021-34173 7.5 HighJuly 14, 2021
• espressif esp32-d0wd firmware, esp32-d2wd firmware, esp32-pico-d4 firmware +1 more +3 more An issue was discovered in the Espressif ESP32 mask ROM code 2016-06-08 0 through 2. Lack of anti... CVE-2019-17391 4.6 MediumNovember 14, 2019
• espressif esp-idf, arduino-esp32, esp8266 nonos sdk +2 more The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0... CVE-2019-12586 Public exploit 6.5 MediumSeptember 4, 2019