Latest vulnerabilities for vendor "espressif"

Where

Sort:

Software

espressif esp-idf

espressif esp32 microchip

espressif esf-idf

espressif esp32

espressif esp8266

espressif arduino-esp32

espressif esp idf

espressif esp32 firmware

espressif esp32-pico-d4

espressif esp32-pico-d4 firmware

espressif usb host hid driver

espressif esp-eye

espressif esp-eye firmware

espressif esp-idf usb host hid driver

espressif esp-idf usb host uvc class driver

espressif esp32-d0wd-v3

espressif esp32-d0wd-v3 firmware

espressif esp32-d0wdr2-v3

espressif esp32-d0wdr2-v3 firmware

espressif esp32-d2wd

espressif esp32-devkitc

espressif esp32-devkitc firmware

espressif esp32-devkitm-1

espressif esp32-devkitm-1 firmware

espressif esp32-h2

espressif esp32-mini-1

espressif esp32-mini-1 firmware

espressif esp32-mini-1u

espressif esp32-mini-1u firmware

espressif esp32-pico-kit

espressif esp32-pico-kit firmware

espressif esp32-pico-mini-02

espressif esp32-pico-mini-02 firmware

espressif esp32-pico-mini-02u

espressif esp32-pico-mini-02u firmware

espressif esp32-pico-v3

espressif esp32-pico-v3 firmware

espressif esp32-pico-v3-02

espressif esp32-pico-v3-02 firmware

espressif esp32-pico-v3-zero

espressif esp32-pico-v3-zero firmware

espressif esp32-pico-v3-zero-devkit

espressif esp32-pico-v3-zero-devkit firmware

espressif esp32-s0wd

espressif esp32-s2

espressif esp32-s3

Espressif ESF-IDFESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing

Risk 43

Severity

7.5

First published (updated )

CVE-2026-55687

Espressif ESP-IDFESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser

Risk 30

Severity

4.6

First published (updated )

CVE-2026-46532

Espressif ESP-IDFESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth

Risk 48

Severity

7.1

First published (updated )

CVE-2026-45542

Espressif ESP-IDFESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers

Risk 40

Severity

7.1

First published (updated )

CVE-2026-45329

Espressif ESP-IDFESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers

Risk 77

Severity

9.3

First published (updated )

CVE-2026-45328

Espressif ESP-IDFESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parser

Risk 38

Severity

6.5

First published (updated )

CVE-2026-45160

Espressif ESP-IDFESF-IDF: Remote Null Pointer Dereference in WebSocket Server

Risk 43

Severity

7.5

First published (updated )

CVE-2026-45541

Espressif Espressif Shared GitHub DangerJSEspressif Shared GitHub DangerJS: Untrusted Search Path in DangerJS Action Entrypoint

Risk 53

Severity

8.2

First published (updated )

CVE-2026-44358

Espressif Arduino-esp32arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCE

Risk 86

Severity

9.8

First published (updated )

CVE-2026-42854

github/espressif/arduino-esp32arduino-esp32: Digest authentication URI mismatch bypass in WebServer allows cross-resource replay attack

Risk 43

Severity

7.5

First published (updated )

CVE-2026-42855

Espressif Arduino-esp32Improper validation of NBNS name_len in arduino-esp32 NetBIOS leads to memory corruption

Risk 79

Severity

8.8

First published (updated )

CVE-2026-41429

Espressif ESP-IDFESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning

Risk 31

Severity

6.3

EPSS

0.02%

First published (updated )

CVE-2026-25508

Espressif ESP-IDFESF-IDF Has Use-after-free Vulnerability in BLE Provisioning

Risk 31

Severity

6.3

EPSS

0.02%

First published (updated )

CVE-2026-25507

Espressif ESP-IDFESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow

Risk 52

Severity

EPSS

0.03%

First published (updated )

CVE-2026-25532

espressif/usb_host_hidespressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path

Risk 58

Severity

6.4

First published (updated )

CVE-2025-68657

Espressif ESP-IDF USB Host HID DriverEspressif ESP-IDF USB Host HID (Human Interface Device) Driver Descriptor Use-After-Free Vulnerability

Risk 62

Severity

6.8

First published (updated )

CVE-2025-68656

Espressif ESP-IDF USB Host UVC Class DriverEspressif ESP-IDF USB Host UVC Class Driver has a stack buffer overflow in UVC descriptor printing

Risk 62

Severity

6.8

First published (updated )

CVE-2025-68622

Espressif ESP-IDFESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling

Risk 58

Severity

7.6

First published (updated )

CVE-2025-68474

Espressif ESP-IDFESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handling

Risk 64

Severity

8.6

First published (updated )

CVE-2025-68473

Espressif ESP-IDFESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling

Risk 66

Severity

9.1

First published (updated )

CVE-2025-66409

Espressif ESP32Constant Time Issue with Xtensa-based ESP32 and X22519

Risk 43

Severity

7.5

First published (updated )

CVE-2025-12888

Espressif ESF-IDFESP32-P4 JPEG Decoder Header Parsing Vulnerability

Risk 33

Severity

6.9

First published (updated )

CVE-2025-65092

Espressif ESP-IDFESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability

Risk 33

Severity

6.9

First published (updated )

CVE-2025-64342

Espressif ESP-IDFESF-IDF BluFi Example Memory Overflow Vulnerability

Risk 79

Severity

8.8

First published (updated )

CVE-2025-55297

Espressif ESP-IDFESP-NOW Integer Underflow Vulnerability Advisory

Risk 61

Severity

9.8

EPSS

0.38%

First published (updated )

CVE-2025-52471

Espressif Esp idfEspressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in Authentication bypass. I…

Risk 77

Severity

8.8

First published (updated )

CVE-2024-53406

BleepingComputerUndocumented backdoor found in Bluetooth chip used by a billion devices

Exploited

First published (updated )

News

BleepingComputer

BleepingComputerUndocumented commands found in Bluetooth chip used by a billion devices

Exploited

First published (updated )

News

BleepingComputer

Espressif Esp32 FirmwareEspressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).

Risk 42

Severity

6.8

EPSS

0.10%

First published (updated )

CVE-2025-27840

Espressif ESPTouchAES/CBC Constant IV Vulnerability in ESPTouch v2

Risk 40

Severity

6.6

First published (updated )

CVE-2024-53845

Trending

Vendor Risk Score

Software

Espressif ESF-IDFESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing

Espressif ESP-IDFESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser

Espressif ESP-IDFESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth

Espressif ESP-IDFESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers

Espressif ESP-IDFESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers

Don't miss critical vulnerabilities

Espressif ESP-IDFESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parser

Espressif ESP-IDFESF-IDF: Remote Null Pointer Dereference in WebSocket Server

Espressif Espressif Shared GitHub DangerJSEspressif Shared GitHub DangerJS: Untrusted Search Path in DangerJS Action Entrypoint

Espressif Arduino-esp32arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCE

github/espressif/arduino-esp32arduino-esp32: Digest authentication URI mismatch bypass in WebServer allows cross-resource replay attack

Don't miss critical vulnerabilities

Espressif Arduino-esp32Improper validation of NBNS name_len in arduino-esp32 NetBIOS leads to memory corruption

Espressif ESP-IDFESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning

Espressif ESP-IDFESF-IDF Has Use-after-free Vulnerability in BLE Provisioning

Espressif ESP-IDFESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow

espressif/usb_host_hidespressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path

Don't miss critical vulnerabilities

Espressif ESP-IDF USB Host HID DriverEspressif ESP-IDF USB Host HID (Human Interface Device) Driver Descriptor Use-After-Free Vulnerability

Espressif ESP-IDF USB Host UVC Class DriverEspressif ESP-IDF USB Host UVC Class Driver has a stack buffer overflow in UVC descriptor printing

Espressif ESP-IDFESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling

Espressif ESP-IDFESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handling

Espressif ESP-IDFESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling

Don't miss critical vulnerabilities

Espressif ESP32Constant Time Issue with Xtensa-based ESP32 and X22519

Espressif ESF-IDFESP32-P4 JPEG Decoder Header Parsing Vulnerability

Espressif ESP-IDFESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability

Espressif ESP-IDFESF-IDF BluFi Example Memory Overflow Vulnerability

Espressif ESP-IDFESP-NOW Integer Underflow Vulnerability Advisory

Don't miss critical vulnerabilities

Espressif Esp idfEspressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in Authentication bypass. I…

BleepingComputerUndocumented backdoor found in Bluetooth chip used by a billion devices

BleepingComputerUndocumented commands found in Bluetooth chip used by a billion devices

Espressif Esp32 FirmwareEspressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).

Espressif ESPTouchAES/CBC Constant IV Vulnerability in ESPTouch v2

Don't miss critical vulnerabilities

Company

Resources

Contact