Browse CVEs

HIGH 7.1 CVE-2026-45542 ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0, a heap buffer overflow exis… Esp Idf Patch available Fix from $1,9502026-06-10 HIGH 8.8 CVE-2026-45328 ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, the esp_tee component exposes secure-service wrap… Esp Idf Patch available Fix from $1,9502026-06-10 HIGH 7.5 CVE-2026-45541 ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0, a NULL-pointer dereference … Esp Idf Patch available Fix from $1,9502026-06-10 MEDIUM 6.5 CVE-2026-45160 ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.7, 5.3.5, 5.4.4, 5.5.4, and 6.0.1, an out-of-bounds read fla… Esp Idf Patch available Fix from $1,6002026-06-10 MEDIUM 6.5 CVE-2026-45329 ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, several ESP-TEE secure-service wrappers in esp_se… Esp Idf Patch available Fix from $1,6002026-06-10 HIGH 7.5 CVE-2026-42855 arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, the WebServer D… Arduino Esp32 3.3.8+ Fix from $1,9502026-05-12 CRITICAL 9.8 CVE-2026-42854 arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, the WebServer m… Arduino Esp32 3.3.8+ Fix from $2,3002026-05-12 HIGH 8.8 CVE-2026-41429 arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, there is a remo… Arduino Esp32 3.3.8+ Fix from $1,9502026-04-24 HIGH 8.0 CVE-2026-25532 ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, a vulnerability exists in… Esp Idf Patch available Fix from $1,9502026-02-04 MEDIUM 6.3 CVE-2026-25507 ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, a use-after-free vulnerab… Esp Idf Patch available Fix from $1,6002026-02-04 MEDIUM 6.3 CVE-2026-25508 ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, an out-of-bounds read vul… Esp Idf Patch available Fix from $1,6002026-02-04 MEDIUM 6.8 CVE-2025-68656 Espressif ESP-IDF USB Host HID (Human Interface Device) Driver allows access to HID devices. Prior to 1.1.0, usb_class_request_get_descriptor() frees… Usb Host Hid Driver 1.1.0+ Fix from $1,6002026-01-12 MEDIUM 6.4 CVE-2025-68657 Espressif ESP-IDF USB Host HID (Human Interface Device) Driver allows access to HID devices. Prior to 1.1.0, calls to hid_host_device_close() can fre… Usb Host Hid Driver 1.1.0+ Fix from $1,6002026-01-12 MEDIUM 6.8 CVE-2025-68622 Espressif ESP-IDF USB Host UVC Class Driver allows video streaming from USB cameras. Prior to 2.4.0, a vulnerability in the esp-usb UVC host implemen… Usb Host Uvc Class Driver 2.4.0+ Fix from $1,6002026-01-12 HIGH 8.6 CVE-2025-68473 ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, in the ESP-IDF B… Esp Idf Patch available Fix from $1,9502025-12-27 HIGH 7.6 CVE-2025-68474 ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, in the avrc_vend… Esp Idf Patch available Fix from $1,9502025-12-27 CRITICAL 9.1 CVE-2025-66409 ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, when AVRCP is enabled on … Esp Idf after 5.5.1 Fix from $2,3002025-12-02 HIGH 8.8 CVE-2025-55297 ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. The BluFi example bundled in ESP-IDF was vulnerable to memory overflows in t… Esp Idf 5.0.9 / 5.1.6+ Fix from $1,9502025-08-21 CRITICAL 9.8 CVE-2025-52471 ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. An integer underflow vulnerability has been identified in the ESP-NOW protoc… Esp Idf Patch available Fix from $2,3002025-06-24 HIGH 8.8 CVE-2024-53406 Espressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in Authentication bypass. In the reconnection phase, the device reuses the s… Esp Idf No fix yet Fix from $1,9502025-03-13 MEDIUM 6.8 CVE-2025-27840 Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory). Esp32 Firmware No fix yet Fix from $1,6002025-03-08 HIGH 7.5 CVE-2024-51428 An issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service (DoS) via a crafted data channel packet. Esp Idf Mitigation only Fix from $1,9502024-11-07 HIGH 8.1 CVE-2024-33453 Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive information via the externalId component. Esp Idf Mitigation only Fix from $1,9502024-10-17 MEDIUM 6.5 CVE-2024-42483 ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An replay attacks vulnerability was discovered in the implementation of the… Esp Now 2.5.2+ Fix from $1,6002024-09-12 MEDIUM 6.5 CVE-2024-33454 Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the Bluetooth stack compone… Esp Idf No fix yet Fix from $1,6002024-05-14 MEDIUM 5.7 CVE-2024-28183 ESP-IDF is the development framework for Espressif SoCs supported on Windows, Linux and macOS. A Time-of-Check to Time-of-Use (TOCTOU) vulnerability … Esp Idf Patch available Fix from $1,6002024-03-25 HIGH 7.5 CVE-2023-46894 An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm. Esptool No fix yet Fix from $1,9502023-11-09 MEDIUM 6.8 CVE-2023-35818 An issue was discovered on Espressif ESP32 3.0 (ESP32_rev300 ROM) devices. An EMFI attack on ECO3 provides the attacker with a capability to influenc… Esp32 D0wd V3 Firmware Mitigation only Fix from $1,6002023-07-17 HIGH 8.8 CVE-2022-24893 ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK (`ESP-BLE-MESH`), a memory corruption vulnerabili… Esp Idf Patch available Fix from $1,9502022-06-25 HIGH 8.8 CVE-2021-28139 The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Featur… Esp Idf after 4.4 Fix from $1,9502021-09-07