Espressif vulnerabilities
39 CVEs and advisories name Espressif as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-53007arduino-esp32 vulnerable to CRLF injection in WebServer.cpp
- CVE-2025-52471ESP-NOW Integer Underflow Vulnerability Advisory
- CVE-2025-27840Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).
- CVE-2024-53845AES/CBC Constant IV Vulnerability in ESPTouch v2
- CVE-2024-45798Multiple Poisoned Pipeline Execution (PPE) vulnerabilities
- CVE-2024-42483ESP-NOW Replay Attacks Vulnerability
- CVE-2024-42484ESP-NOW OOB Vulnerability In Group Type Message
- CVE-2024-28183Anti Rollback bypass with physical access and TOCTOU attack
- CVE-2022-24893Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption