Latest vulnerabilities for "espressif esp-idf"

Espressif ESP-IDFESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser

Risk 30

Severity

4.6

First published (updated )

CVE-2026-46532

Espressif ESP-IDFESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth

Risk 48

Severity

7.1

First published (updated )

CVE-2026-45542

Espressif ESP-IDFESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers

Risk 40

Severity

7.1

First published (updated )

CVE-2026-45329

Espressif ESP-IDFESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers

Risk 77

Severity

9.3

First published (updated )

CVE-2026-45328

Espressif ESP-IDFESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parser

Risk 38

Severity

6.5

First published (updated )

CVE-2026-45160

Espressif ESP-IDFESF-IDF: Remote Null Pointer Dereference in WebSocket Server

Risk 43

Severity

7.5

First published (updated )

CVE-2026-45541

Espressif ESP-IDFESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning

Risk 31

Severity

6.3

EPSS

0.02%

First published (updated )

CVE-2026-25508

Espressif ESP-IDFESF-IDF Has Use-after-free Vulnerability in BLE Provisioning

Risk 31

Severity

6.3

EPSS

0.02%

First published (updated )

CVE-2026-25507

Espressif ESP-IDFESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow

Risk 52

Severity

8

EPSS

0.03%

First published (updated )

CVE-2026-25532

Espressif ESP-IDFESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling

Risk 58

Severity

7.6

First published (updated )

CVE-2025-68474

Espressif ESP-IDFESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handling

Risk 64

Severity

8.6

First published (updated )

CVE-2025-68473

Espressif ESP-IDFESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling

Risk 66

Severity

9.1

First published (updated )

CVE-2025-66409

Espressif ESP-IDFESF-IDF BluFi Example Memory Overflow Vulnerability

Risk 79

Severity

8.8

First published (updated )

CVE-2025-55297

Espressif ESP-IDFESP-NOW Integer Underflow Vulnerability Advisory

Risk 61

Severity

9.8

EPSS

0.38%

First published (updated )

CVE-2025-52471

Espressif Esp idfEspressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in Authentication bypass. I…

Risk 77

Severity

8.8

First published (updated )

CVE-2024-53406

Espressif Esp idfAn issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service (DoS) via a craft…

Risk 43

Severity

7.5

First published (updated )

CVE-2024-51428

Espressif ESP-IDFBuffer Overflow

Risk 60

Severity

8.1

First published (updated )

CVE-2024-33453

Espressif ESP-IDFBuffer Overflow

Risk 49

Severity

6.5

First published (updated )

CVE-2024-33454

Espressif ESP-IDFAnti Rollback bypass with physical access and TOCTOU attack

Risk 35

Severity

6.1

EPSS

0.04%

First published (updated )

CVE-2024-28183

Espressif ESP-IDFEspressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption

Risk 79

Severity

8.8

First published (updated )

CVE-2022-24893

Espressif ESP-IDFThe Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict…

Risk 79

Severity

8.8

First published (updated )

CVE-2021-28139

Espressif ESP-IDFThe Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle t…

Risk 38

Severity

6.5

First published (updated )

CVE-2021-28135

Espressif ESP-IDFThe Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle t…

Risk 38

Severity

6.5

First published (updated )

CVE-2021-28136

Espressif ESP-IDFBuffer Overflow

Risk 43

Severity

7.5

First published (updated )

CVE-2020-16146

Espressif ESP-IDFThe Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.0 through 4.2 (for E…

Risk 38

Severity

6.5

First published (updated )

CVE-2020-13595

Espressif ESP-IDFInput Validation

Risk 38

Severity

6.5

First published (updated )

CVE-2020-13594

Espressif ESP-IDFAn encryption-bypass issue was discovered on Espressif ESP-IDF devices through 4.2, ESP8266_NONOS_SD…

Risk 52

Severity

6.8

First published (updated )

CVE-2020-12638

Espressif ESP-IDFAn issue was discovered in Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x th…

Risk 63

Severity

7.2

First published (updated )

CVE-2019-15894

Espressif Arduino-esp32The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 thr…

Risk 38

Severity

6.5

First published (updated )

CVE-2019-12586

Espressif ESP-IDFThe EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 thr…

Risk 60

Severity

8.1

First published (updated )

CVE-2019-12587

Trending

Versions

Espressif ESP-IDFESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser

Espressif ESP-IDFESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth

Espressif ESP-IDFESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers

Espressif ESP-IDFESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers

Espressif ESP-IDFESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parser

Don't miss critical vulnerabilities

Espressif ESP-IDFESF-IDF: Remote Null Pointer Dereference in WebSocket Server

Espressif ESP-IDFESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning

Espressif ESP-IDFESF-IDF Has Use-after-free Vulnerability in BLE Provisioning

Espressif ESP-IDFESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow

Espressif ESP-IDFESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling

Don't miss critical vulnerabilities

Espressif ESP-IDFESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handling

Espressif ESP-IDFESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling

Espressif ESP-IDFESF-IDF BluFi Example Memory Overflow Vulnerability

Espressif ESP-IDFESP-NOW Integer Underflow Vulnerability Advisory

Espressif Esp idfEspressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in Authentication bypass. I…

Don't miss critical vulnerabilities

Espressif Esp idfAn issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service (DoS) via a craft…

Espressif ESP-IDFBuffer Overflow

Espressif ESP-IDFBuffer Overflow

Espressif ESP-IDFAnti Rollback bypass with physical access and TOCTOU attack

Espressif ESP-IDFEspressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption

Don't miss critical vulnerabilities

Espressif ESP-IDFThe Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict…

Espressif ESP-IDFThe Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle t…

Espressif ESP-IDFThe Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle t…

Espressif ESP-IDFBuffer Overflow

Espressif ESP-IDFThe Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.0 through 4.2 (for E…

Don't miss critical vulnerabilities

Espressif ESP-IDFInput Validation

Espressif ESP-IDFAn encryption-bypass issue was discovered on Espressif ESP-IDF devices through 4.2, ESP8266_NONOS_SD…

Espressif ESP-IDFAn issue was discovered in Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x th…

Espressif Arduino-esp32The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 thr…

Espressif ESP-IDFThe EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 thr…

Don't miss critical vulnerabilities

Company

Resources

Contact