CVEs we hold for Espressif

Records whose assigning authority named Espressif as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-55687ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsingespressif esp-idf

CVE-2026-46532ESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parserespressif esp-idf

CVE-2026-45542ESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetoothespressif esp-idf

CVE-2026-45541ESF-IDF: Remote Null Pointer Dereference in WebSocket Serverespressif esp-idf

CVE-2026-45329ESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappersespressif esp-idf

CVE-2026-45328ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappersespressif esp-idf

CVE-2026-45160ESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parserespressif esp-idf

CVE-2026-44358Espressif Shared GitHub DangerJS: Untrusted Search Path in DangerJS Action Entrypointespressif shared-github-dangerjs

CVE-2026-42855arduino-esp32: Digest authentication URI mismatch bypass in WebServer allows cross-resource replay attackespressif arduino-esp32

CVE-2026-42854arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCEespressif arduino-esp32

CVE-2026-41429Improper validation of NBNS name_len in arduino-esp32 NetBIOS leads to memory corruptionespressif arduino-esp32

CVE-2026-25532ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflowespressif esp-idf

CVE-2026-25508ESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioningespressif esp-idf

CVE-2026-25507ESF-IDF Has Use-after-free Vulnerability in BLE Provisioningespressif esp-idf

CVE-2025-68657espressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Pathespressif esp-usb

CVE-2025-68656Espressif ESP-IDF USB Host HID (Human Interface Device) Driver Descriptor Use-After-Free Vulnerabilityespressif esp-usb

CVE-2025-68622Espressif ESP-IDF USB Host UVC Class Driver has a stack buffer overflow in UVC descriptor printingespressif esp-usb

CVE-2025-68474ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handlingespressif esp-idf

CVE-2025-68473ESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handlingespressif esp-idf

CVE-2025-66409ESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handlingespressif esp-idf

CVE-2025-65092ESP32-P4 JPEG Decoder Header Parsing Vulnerabilityespressif esp-idf

CVE-2025-64342ESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerabilityespressif esp-idf

CVE-2025-55297ESF-IDF BluFi Example Memory Overflow Vulnerabilityespressif esp-idf

CVE-2025-53540CSRF Vulnerability in Firmware Update Endpoints Allows Remote Code Executionespressif arduino-esp32

CVE-2025-53007arduino-esp32 vulnerable to CRLF injection in WebServer.cppespressif arduino-esp32

CVE-2025-52471ESP-NOW Integer Underflow Vulnerability Advisoryespressif esp-idf

CVE-2025-27840no title heldEspressif ESP32

CVE-2024-53845AES/CBC Constant IV Vulnerability in ESPTouch v2espressif esp-idf

CVE-2024-45798Multiple Poisoned Pipeline Execution (PPE) vulnerabilitiesespressif arduino-esp32

CVE-2024-42484ESP-NOW OOB Vulnerability In Group Type Messageespressif esp-now

CVE-2024-42483ESP-NOW Replay Attacks Vulnerabilityespressif esp-now

CVE-2024-28183Anti Rollback bypass with physical access and TOCTOU attackespressif esp-idf

CVE-2022-24893Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruptionespressif esp-idf

33 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.