# cve.now: Espressif

The newest entries naming Espressif as an affected vendor (up to 200), of 39 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-64860](https://cve.now/CVE-2026-64860.md): espressif/mdns has Uncontrolled Recursion in mDNS Name Decompression (CVSS 6.5)
- [CVE-2026-113780](https://cve.now/CVE-2026-113780.md): ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary (CVSS 9.3)
- [CVE-2026-113783](https://cve.now/CVE-2026-113783.md): ESP-IDF: Stack-based memory corruption in lwIP DNS/SNTP handling for multi-IP DNS responses (CVSS 7.4)
- [CVE-2026-113782](https://cve.now/CVE-2026-113782.md): ESP-IDF: Stack-Based Out-of-Bounds Write in Thread Border Router ND6 Option Parsing (CVSS 7.1)
- [CVE-2026-81507](https://cve.now/CVE-2026-81507.md): ESF-IDF: Bluetooth Classic L2CAP Heap Memory Disclosure Allowing Unauthorized Access to Sensitive Data (CVSS 6.5)
- [CVE-2026-81508](https://cve.now/CVE-2026-81508.md): ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing (CVSS 4.3)
- [CVE-2026-55687](https://cve.now/CVE-2026-55687.md): ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing (CVSS 7.5)
- [CVE-2026-46532](https://cve.now/CVE-2026-46532.md): ESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser (CVSS 4.6)
- [CVE-2026-45542](https://cve.now/CVE-2026-45542.md): ESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth (CVSS 7.1)
- [CVE-2026-45329](https://cve.now/CVE-2026-45329.md): ESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers (CVSS 7.1)
- [CVE-2026-45328](https://cve.now/CVE-2026-45328.md): ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers (CVSS 9.3)
- [CVE-2026-45160](https://cve.now/CVE-2026-45160.md): ESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parser (CVSS 6.5)
- [CVE-2026-45541](https://cve.now/CVE-2026-45541.md): ESF-IDF: Remote Null Pointer Dereference in WebSocket Server (CVSS 7.5)
- [CVE-2026-44358](https://cve.now/CVE-2026-44358.md): Espressif Shared GitHub DangerJS: Untrusted Search Path in DangerJS Action Entrypoint (CVSS 8.2)
- [CVE-2026-42854](https://cve.now/CVE-2026-42854.md): arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCE (CVSS 9.8)
- [CVE-2026-42855](https://cve.now/CVE-2026-42855.md): arduino-esp32: Digest authentication URI mismatch bypass in WebServer allows cross-resource replay attack (CVSS 7.5)
- [CVE-2026-41429](https://cve.now/CVE-2026-41429.md): Improper validation of NBNS name\_len in arduino-esp32 NetBIOS leads to memory corruption (CVSS 8.8)
- [CVE-2026-25508](https://cve.now/CVE-2026-25508.md): ESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning (CVSS 6.3)
- [CVE-2026-25507](https://cve.now/CVE-2026-25507.md): ESF-IDF Has Use-after-free Vulnerability in BLE Provisioning (CVSS 6.3)
- [CVE-2026-25532](https://cve.now/CVE-2026-25532.md): ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow (CVSS 6.3)
- [CVE-2025-68657](https://cve.now/CVE-2025-68657.md): espressif/usb\_host\_hid Double-Free Race Condition in USB Host HID Device Close Path (CVSS 6.4)
- [CVE-2025-68656](https://cve.now/CVE-2025-68656.md): Espressif ESP-IDF USB Host HID (Human Interface Device) Driver Descriptor Use-After-Free Vulnerability (CVSS 6.8)
- [CVE-2025-68622](https://cve.now/CVE-2025-68622.md): Espressif ESP-IDF USB Host UVC Class Driver has a stack buffer overflow in UVC descriptor printing (CVSS 6.8)
- [CVE-2025-68474](https://cve.now/CVE-2025-68474.md): ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling (CVSS 6.1)
- [CVE-2025-68473](https://cve.now/CVE-2025-68473.md): ESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handling (CVSS 0.0)
- [CVE-2025-66409](https://cve.now/CVE-2025-66409.md): ESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling (CVSS 2.7)
- [CVE-2025-65092](https://cve.now/CVE-2025-65092.md): ESP32-P4 JPEG Decoder Header Parsing Vulnerability (CVSS 6.9)
- [CVE-2025-64342](https://cve.now/CVE-2025-64342.md): ESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability (CVSS 6.9)
- [CVE-2025-55297](https://cve.now/CVE-2025-55297.md): ESF-IDF BluFi Example Memory Overflow Vulnerability (CVSS 5.2)
- [CVE-2025-53540](https://cve.now/CVE-2025-53540.md): CSRF Vulnerability in Firmware Update Endpoints Allows Remote Code Execution (CVSS 8.7)
- [CVE-2025-53007](https://cve.now/CVE-2025-53007.md): arduino-esp32 vulnerable to CRLF injection in WebServer.cpp (CVSS 8.9)
- [CVE-2025-52471](https://cve.now/CVE-2025-52471.md): ESP-NOW Integer Underflow Vulnerability Advisory (CVSS 7.2)
- [CVE-2025-27840](https://cve.now/CVE-2025-27840.md): Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory). (CVSS 6.8)
- [CVE-2024-53845](https://cve.now/CVE-2024-53845.md): AES/CBC Constant IV Vulnerability in ESPTouch v2 (CVSS 6.6)
- [CVE-2024-45798](https://cve.now/CVE-2024-45798.md): Multiple Poisoned Pipeline Execution (PPE) vulnerabilities (CVSS 10.0)
- [CVE-2024-42483](https://cve.now/CVE-2024-42483.md): ESP-NOW Replay Attacks Vulnerability (CVSS 6.5)
- [CVE-2024-42484](https://cve.now/CVE-2024-42484.md): ESP-NOW OOB Vulnerability In Group Type Message (CVSS 6.5)
- [CVE-2024-28183](https://cve.now/CVE-2024-28183.md): Anti Rollback bypass with physical access and TOCTOU attack (CVSS 6.1)
- [CVE-2022-24893](https://cve.now/CVE-2022-24893.md): Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption (CVSS 7.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/espressif
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.