What’s Vulnerable › Products
espressif esp-idf vulnerabilities
37 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 22 published in the last 12 months.
Check whether your espressif esp-idf version is affected
Latest espressif esp-idf vulnerabilities
- CVE-2026-81507 — ESF-IDF: Bluetooth Classic L2CAP Heap Memory Disclosure Allowing Unauthorized Access to Sensitive Data (CVSS 6.5)
- CVE-2026-81508 — ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing (CVSS 4.3)
- CVE-2026-55687 — ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing (CVSS 7.5)
- CVE-2026-46532 — ESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser (CVSS 4.6)
- CVE-2026-45542 — ESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth (CVSS 7.1)
- CVE-2026-45541 — ESF-IDF: Remote Null Pointer Dereference in WebSocket Server (CVSS 7.5)
- CVE-2026-45329 — ESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers (CVSS 6.5)
- CVE-2026-45328 — ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers (CVSS 8.8)
- CVE-2026-45160 — ESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parser (CVSS 6.5)
- CVE-2026-25532 — ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow (CVSS 8.0)
- CVE-2026-25508 — ESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning (CVSS 6.3)
- CVE-2026-25507 — ESF-IDF Has Use-after-free Vulnerability in BLE Provisioning (CVSS 6.3)
- CVE-2025-68474 — ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling (CVSS 7.6)
- CVE-2025-68473 — ESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handling (CVSS 8.6)
- CVE-2025-66409 — ESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling (CVSS 9.1)
- CVE-2025-65092 — ESP32-P4 JPEG Decoder Header Parsing Vulnerability (CVSS 6.9)
- CVE-2025-64342 — ESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability (CVSS 6.9)
- CVE-2025-55297 — ESF-IDF BluFi Example Memory Overflow Vulnerability (CVSS 8.8)
- CVE-2025-52471 — ESP-NOW Integer Underflow Vulnerability Advisory (CVSS 9.8)
- CVE-2024-53406 — (CVSS 8.8)
- CVE-2024-53845 — AES/CBC Constant IV Vulnerability in ESPTouch v2 (CVSS 6.6)
- CVE-2024-51428 — (CVSS 7.5)
- CVE-2024-33453 — (CVSS 8.1)
- CVE-2024-33454 — (CVSS 6.5)
- CVE-2024-28183 — Anti Rollback bypass with physical access and TOCTOU attack (CVSS 5.7)