CVE-2025-68657: espressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path
Espressif ESP-IDF USB Host HID (Human Interface Device) Driver allows access to HID devices. Prior to 1.1.0, calls to hidhostdeviceclose() can free the same usbtransfert twice. The USB event callback and user code share the hidifacet state without locking, so both can tear down a READY interface simultaneously, corrupting heap metadata inside the ESP USB host stack. This vulnerability is fixed in 1.1.0.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68657?
CVE-2025-68657 is classified as a vulnerability that can lead to double-free conditions which may cause application instability.
How do I fix CVE-2025-68657?
To fix CVE-2025-68657, update the espressif/usb_host_hid to version 1.1.0 or newer.
What is the impact of CVE-2025-68657?
The impact of CVE-2025-68657 includes potential application crashes and unpredictable behavior due to double-free issues.
Which versions of espressif/usb_host_hid are affected by CVE-2025-68657?
CVE-2025-68657 affects all versions of espressif/usb_host_hid prior to 1.1.0.
Is CVE-2025-68657 a common vulnerability?
CVE-2025-68657 is less common but can pose significant risks in applications utilizing the affected driver.