Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

esp-idf — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in esp-idf, with AI-generated Chinese analysis, references, and POCs.

Vendor: espressif

CVE IDTitleCVSSSeverityPublished
CVE-2026-25508 ESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning CWE-125 6.3 Medium2026-02-04
CVE-2026-25507 ESF-IDF Has Use-after-free Vulnerability in BLE Provisioning CWE-416 6.3 Medium2026-02-04
CVE-2026-25532 ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow CWE-191 6.3 Medium2026-02-04
CVE-2025-68474 ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling CWE-787 7.5 -2025-12-26
CVE-2025-68473 ESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handling CWE-787 6.5 -2025-12-26
CVE-2025-66409 ESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling CWE-125 6.5AIMediumAI2025-12-02
CVE-2025-65092 ESP32-P4 JPEG Decoder Header Parsing Vulnerability CWE-125 9.1 -2025-11-21
CVE-2025-64342 ESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability CWE-754--AI2025-11-17
CVE-2025-55297 ESF-IDF BluFi Example Memory Overflow Vulnerability CWE-120 7.4AIHighAI2025-08-21
CVE-2025-52471 ESP-NOW Integer Underflow Vulnerability Advisory CWE-191 9.8AICriticalAI2025-06-24
CVE-2024-53845 AES/CBC Constant IV Vulnerability in ESPTouch v2 CWE-327 7.5 -2024-12-11
CVE-2024-28183 Anti Rollback bypass with physical access and TOCTOU attack CWE-367 6.1 Medium2024-03-25
CVE-2022-24893 Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption CWE-787 7.5 High2022-06-25

All 13 known CVE vulnerabilities affecting esp-idf with full Chinese analysis, references, and POCs where available.