Vulnerabilities in espressif
34 resultsVexday analysis
A Espressif apresenta 32 vulnerabilidades registradas, com 11 delas publicadas nos últimos 90 dias, indicando ritmo recente de descobertas. Nenhuma está sob exploração ativa conhecida (KEV), e apenas 3 alcançam nível crítico, com a fraqueza dominante sendo leitura fora dos limites de buffer (CWE-125). O perfil sugere risco moderado com necessidade de atenção a atualizações recentes, particularmente em componentes de processamento de dados.
CVE-2026-41429HIGHImproper validation of NBNS name_len in arduino-esp32 NetBIOS leads to memory corruptionEPSS 0.3%CVE-2026-25508MEDIUMESF-IDF Has Memory Safety Vulnerabilities in BLE ProvisioningEPSS 0.3%CVE-2026-25507MEDIUMESF-IDF Has Use-after-free Vulnerability in BLE ProvisioningEPSS 0.3%CVE-2026-44358HIGHEspressif Shared GitHub DangerJS: Untrusted Search Path in DangerJS Action EntrypointEPSS 0.3%CVE-2025-68474MEDIUMESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command HandlingEPSS 0.3%CVE-2024-42483MEDIUMESP-NOW Replay Attacks VulnerabilityEPSS 0.3%CVE-2025-53540HIGHCSRF Vulnerability in Firmware Update Endpoints Allows Remote Code ExecutionEPSS 0.3%CVE-2025-68622MEDIUMEspressif ESP-IDF USB Host UVC Class Driver has a stack buffer overflow in UVC descriptor printingEPSS 0.2%CVE-2024-28183MEDIUMAnti Rollback bypass with physical access and TOCTOU attackEPSS 0.2%CVE-2025-68656MEDIUMEspressif ESP-IDF USB Host HID (Human Interface Device) Driver Descriptor Use-After-Free VulnerabilityEPSS 0.2%CVE-2026-45328CRITICALESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service WrappersEPSS 0.2%CVE-2026-45329HIGHESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service WrappersEPSS 0.2%CVE-2025-68657MEDIUMespressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close PathEPSS 0.2%CVE-2026-81508MEDIUMESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet ProcessingEPSS —