CVE-2026-55687: ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Versions 6.0.1, 5.5.4, 5.4.4, 5.3.5, and possibly prior contain an out-of-bounds write in jpegparsedqtmarker() in components/espdriverjpeg/jpegparsemarker.c because the attacker-controlled DQT marker Tq nibble is used as an index into the qttbl array without validating that it is in the range 0..3, allowing malformed JPEG input to corrupt stack memory and reliably trigger a denial of service. This issue is fixed in version 6.0.2 and is expected to be fixed in versions 5.5.5, 5.4.5, and 5.3.6.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ESF-IDFto a version that resolves this vulnerability.Fixed in 6.0.2 - Upgrade
Upgrade
ESF-IDFto a version that resolves this vulnerability.Fixed in 5.5.5 - Upgrade
Upgrade
ESF-IDFto a version that resolves this vulnerability.Fixed in 5.4.5 - Upgrade
Upgrade
ESF-IDFto a version that resolves this vulnerability.Fixed in 5.3.6
Event History
Frequently Asked Questions
What is the severity of CVE-2026-55687?
The severity of CVE-2026-55687 is high, rated at 7.5 on the CVSS scale.
What vulnerabilities does CVE-2026-55687 address?
CVE-2026-55687 addresses an out-of-bounds write vulnerability in the JPEG decoder DQT marker parsing in the Espressif Internet of Things Development Framework.
How do I fix CVE-2026-55687?
To fix CVE-2026-55687, upgrade to the latest version of the Espressif ESF-IDF that addresses this vulnerability.
What are the affected versions for CVE-2026-55687?
The affected versions for CVE-2026-55687 include versions 6.0.1, 5.5.4, 5.4.4, 5.3.5, and possibly prior.
What types of attacks can exploit CVE-2026-55687?
CVE-2026-55687 can be exploited by attackers through crafted JPEG images that manipulate the DQT marker Tq nibble.