Vulnerability index

Browse CVEs

42 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Esp Idf HIGH 7.1
CVE-2026-45542

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0, a heap buffer overflow exis…

Patch available
Fix from $1,950 2026-06-10
Esp Idf HIGH 8.8
CVE-2026-45328

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, the esp_tee component exposes secure-service wrap…

Patch available
Fix from $1,950 2026-06-10
Esp Idf HIGH 7.5
CVE-2026-45541

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0, a NULL-pointer dereference …

Patch available
Fix from $1,950 2026-06-10
Esp Idf MEDIUM 6.5
CVE-2026-45160

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.7, 5.3.5, 5.4.4, 5.5.4, and 6.0.1, an out-of-bounds read fla…

Patch available
Fix from $1,600 2026-06-10
Esp Idf MEDIUM 6.5
CVE-2026-45329

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, several ESP-TEE secure-service wrappers in esp_se…

Patch available
Fix from $1,600 2026-06-10
Arduino Esp32 HIGH 7.5
CVE-2026-42855

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, the WebServer D…

Fix: 3.3.8+
Fix from $1,950 2026-05-12
Arduino Esp32 CRITICAL 9.8
CVE-2026-42854

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, the WebServer m…

Fix: 3.3.8+
Fix from $2,300 2026-05-12
Arduino Esp32 HIGH 8.8
CVE-2026-41429

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, there is a remo…

Fix: 3.3.8+
Fix from $1,950 2026-04-24
Esp Idf HIGH 8.0
CVE-2026-25532

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, a vulnerability exists in…

Patch available
Fix from $1,950 2026-02-04
Esp Idf MEDIUM 6.3
CVE-2026-25507

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, a use-after-free vulnerab…

Patch available
Fix from $1,600 2026-02-04
Esp Idf MEDIUM 6.3
CVE-2026-25508

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, an out-of-bounds read vul…

Patch available
Fix from $1,600 2026-02-04
Usb Host Hid Driver MEDIUM 6.8
CVE-2025-68656

Espressif ESP-IDF USB Host HID (Human Interface Device) Driver allows access to HID devices. Prior to 1.1.0, usb_class_request_get_descriptor() frees…

Fix: 1.1.0+
Fix from $1,600 2026-01-12
Usb Host Hid Driver MEDIUM 6.4
CVE-2025-68657

Espressif ESP-IDF USB Host HID (Human Interface Device) Driver allows access to HID devices. Prior to 1.1.0, calls to hid_host_device_close() can fre…

Fix: 1.1.0+
Fix from $1,600 2026-01-12
Usb Host Uvc Class Driver MEDIUM 6.8
CVE-2025-68622

Espressif ESP-IDF USB Host UVC Class Driver allows video streaming from USB cameras. Prior to 2.4.0, a vulnerability in the esp-usb UVC host implemen…

Fix: 2.4.0+
Fix from $1,600 2026-01-12
Esp Idf HIGH 8.6
CVE-2025-68473

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, in the ESP-IDF B…

Patch available
Fix from $1,950 2025-12-27
Esp Idf HIGH 7.6
CVE-2025-68474

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, in the avrc_vend…

Patch available
Fix from $1,950 2025-12-27
Esp Idf CRITICAL 9.1
CVE-2025-66409

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, when AVRCP is enabled on …

Fix: after 5.5.1
Fix from $2,300 2025-12-02
Esp Idf HIGH 8.8
CVE-2025-55297

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. The BluFi example bundled in ESP-IDF was vulnerable to memory overflows in t…

Fix: 5.0.9 / 5.1.6+
Fix from $1,950 2025-08-21
Esp Idf CRITICAL 9.8
CVE-2025-52471

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. An integer underflow vulnerability has been identified in the ESP-NOW protoc…

Patch available
Fix from $2,300 2025-06-24
Esp Idf HIGH 8.8
CVE-2024-53406

Espressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in Authentication bypass. In the reconnection phase, the device reuses the s…

No fix yet
Fix from $1,950 2025-03-13
Esp32 Firmware MEDIUM 6.8
CVE-2025-27840

Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).

No fix yet
Fix from $1,600 2025-03-08
Esp Idf HIGH 7.5
CVE-2024-51428

An issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service (DoS) via a crafted data channel packet.

Mitigation only
Fix from $1,950 2024-11-07
Esp Idf HIGH 8.1
CVE-2024-33453

Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive information via the externalId component.

Mitigation only
Fix from $1,950 2024-10-17
Esp Now MEDIUM 6.5
CVE-2024-42483

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An replay attacks vulnerability was discovered in the implementation of the…

Fix: 2.5.2+
Fix from $1,600 2024-09-12
Esp Idf MEDIUM 6.5
CVE-2024-33454

Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the Bluetooth stack compone…

No fix yet
Fix from $1,600 2024-05-14
Esp Idf MEDIUM 5.7
CVE-2024-28183

ESP-IDF is the development framework for Espressif SoCs supported on Windows, Linux and macOS. A Time-of-Check to Time-of-Use (TOCTOU) vulnerability …

Patch available
Fix from $1,600 2024-03-25
Esptool HIGH 7.5
CVE-2023-46894

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm.

No fix yet
Fix from $1,950 2023-11-09
Esp32 D0wd V3 Firmware MEDIUM 6.8
CVE-2023-35818

An issue was discovered on Espressif ESP32 3.0 (ESP32_rev300 ROM) devices. An EMFI attack on ECO3 provides the attacker with a capability to influenc…

Mitigation only
Fix from $1,600 2023-07-17
Esp Idf HIGH 8.8
CVE-2022-24893

ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK (`ESP-BLE-MESH`), a memory corruption vulnerabili…

Patch available
Fix from $1,950 2022-06-25
Esp Idf HIGH 8.8
CVE-2021-28139

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Featur…

Fix: after 4.4
Fix from $1,950 2021-09-07