Browse CVEs

MEDIUM 6.5 CVE-2021-28135 The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of continuous unsolicited LMP respon… Esp Idf after 4.4 Fix from $1,6002021-09-07 MEDIUM 6.5 CVE-2021-28136 The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of multiple LMP IO Capability Reques… Esp Idf after 4.4 Fix from $1,6002021-09-07 HIGH 7.5 CVE-2021-34173 An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa frame. The devi… Esp32 Firmware after 4.2 Fix from $1,9502021-07-14 HIGH 7.5 CVE-2020-16146 Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.7, 3.2.x through 3.2.3, 3.3.x through 3.3.2, and 4.0.x through 4.0.1 has a Buffer Overf… Esp Idf after 4.0.1 Fix from $1,9502021-01-12 MEDIUM 6.5 CVE-2020-13594 The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.2 and earlier (for ESP32 devices) does not properly restrict the chan… Esp Idf after 4.2 Fix from $1,6002020-08-31 MEDIUM 6.5 CVE-2020-13595 The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.0 through 4.2 (for ESP32 devices) returns the wrong number of complet… Esp Idf after 4.2 Fix from $1,6002020-08-31 MEDIUM 6.8 CVE-2020-12638 An encryption-bypass issue was discovered on Espressif ESP-IDF devices through 4.2, ESP8266_NONOS_SDK devices through 3.0.3, and ESP8266_RTOS_SDK dev… Esp Idf after 4.2 Fix from $1,6002020-07-23 MEDIUM 6.8 CVE-2019-15894 An issue was discovered in Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1. An attacker… Esp Idf 3.0.9 / 3.1.6+ Fix from $1,6002019-10-07 MEDIUM 6.5 CVE-2019-12586 The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 processes EAP Success messages before … Arduino Esp32 after 4.0.0 Fix from $1,6002019-09-04 HIGH 8.1 CVE-2019-12587 The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 allows the installation of a zero Pair… Esp Idf after 4.0.0 Fix from $1,9502019-09-04 MEDIUM 6.5 CVE-2019-12588 The client 802.11 mac implementation in Espressif ESP8266_NONOS_SDK 2.2.0 through 3.1.0 does not validate correctly the RSN AuthKey suite list count … Arduino Esp8266 after 3.1.0 Fix from $1,6002019-09-04 MEDIUM 6.4 CVE-2018-18558 An issue was discovered in Espressif ESP-IDF 2.x and 3.x before 3.0.6 and 3.1.x before 3.1.1. Insufficient validation of input data in the 2nd stage … Esp Idf 3.0.6+ Fix from $1,6002019-05-13