Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

esp-idf — Vulnerabilities & Security Advisories 21

All 21 CVE vulnerabilities found in esp-idf, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability records for Espressif Systems' esp-idf, the Embedded SDK for ESP32 microcontrollers, categorized by Common Weakness Enumeration tags. It collects security flaws affecting the esp-idf codebase, covering advisories published between 2020 and 2024. Users can track Espressif's security advisories, analyze specific weakness classes, and review the product's historical vulnerability exposure without listing individual CVE identifiers. The interface allows filtering by year, weakness type, or impact severity to assess risk trends over time.

Vendor: espressif

CVE ID Title CVSS Severity Published
CVE-2026-81508 ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing CWE-125 4.3 Medium 2026-09-24
CVE-2026-55687 ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing CWE-121 7.5 High 2026-07-10
CVE-2026-46532 ESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser CWE-125 4.6 Medium 2026-06-10
CVE-2026-45542 ESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth CWE-122 7.1 High 2026-06-10
CVE-2026-45329 ESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers CWE-20 7.1 High 2026-06-10
CVE-2026-45328 ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers CWE-20 9.3 Critical 2026-06-10
CVE-2026-45160 ESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parser CWE-125 6.5 Medium 2026-06-10
CVE-2026-45541 ESF-IDF: Remote Null Pointer Dereference in WebSocket Server CWE-476 7.5 High 2026-06-10
CVE-2026-25508 ESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning CWE-125 6.3 Medium 2026-02-04
CVE-2026-25507 ESF-IDF Has Use-after-free Vulnerability in BLE Provisioning CWE-416 6.3 Medium 2026-02-04
CVE-2026-25532 ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow CWE-191 6.3 Medium 2026-02-04
CVE-2025-68474 ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling CWE-787 7.5 - 2025-12-26
CVE-2025-68473 ESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handling CWE-787 6.5 - 2025-12-26
CVE-2025-66409 ESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling CWE-125 6.5AI Medium AI 2025-12-02
CVE-2025-65092 ESP32-P4 JPEG Decoder Header Parsing Vulnerability CWE-125 9.1 - 2025-11-21
CVE-2025-64342 ESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability CWE-754 - - AI 2025-11-17
CVE-2025-55297 ESF-IDF BluFi Example Memory Overflow Vulnerability CWE-120 7.4AI High AI 2025-08-21
CVE-2025-52471 ESP-NOW Integer Underflow Vulnerability Advisory CWE-191 9.8AI Critical AI 2025-06-24
CVE-2024-53845 AES/CBC Constant IV Vulnerability in ESPTouch v2 CWE-327 7.5 - 2024-12-11
CVE-2024-28183 Anti Rollback bypass with physical access and TOCTOU attack CWE-367 6.1 Medium 2024-03-25
CVE-2022-24893 Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption CWE-787 7.5 High 2022-06-25

All 21 known CVE vulnerabilities affecting esp-idf with full Chinese analysis, references, and POCs where available.