espressif vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20245
3. 202510
4. 202623

Newest CVEs

• CVE-2026-64860

  espressif/mdns has Uncontrolled Recursion in mDNS Name Decompression

  espressif · esp-protocols

  Medium6.5
• CVE-2026-113780

  ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary

  espressif · esp-idf

  Critical9.3
• CVE-2026-113783

  ESP-IDF: Stack-based memory corruption in lwIP DNS/SNTP handling for multi-IP DNS responses

  espressif · esp-idf

  High7.4
• CVE-2026-113782

  ESP-IDF: Stack-Based Out-of-Bounds Write in Thread Border Router ND6 Option Parsing

  espressif · esp-idf

  High7.1
• CVE-2026-81507

  ESF-IDF: Bluetooth Classic L2CAP Heap Memory Disclosure Allowing Unauthorized Access to Sensitive Data

  espressif · esp-idf

  Medium6.5
• CVE-2026-81508

  ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing

  espressif · esp-idf

  Medium4.3
• CVE-2026-55687

  ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing

  espressif · esp-idf

  High7.5
• CVE-2026-46532

  ESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser

  espressif · esp-idf

  Medium4.6
• CVE-2026-45542

  ESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth

  espressif · esp-idf

  High7.1
• CVE-2026-45329

  ESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers

  espressif · esp-idf

  High7.1