Known vulnerabilities in ESP-IDF
Vendor:
Espressif Systems
Software:
ESP-IDF
Software CPE:
cpe:2.3:a:espressif_systems:esp-idf:*:*:*:*:*:*:*:*
Website:
https://www.espressif.com/
Total vulnerabilities:
53
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
6.1.1
6.0.3
6.1
6.0.2
5.5.5
5.4.5
5.3.6
5.2.8
5.2.7
6.0.1
5.4.4
5.5.4
5.3.5
6.0
5.5.3
5.1.7
5.3.0
5.5.2
5.4.3
5.2.6
5.5.1
5.3.4
5.5
5.4.2
5.0.9
5.3.3
5.4.1
5.2.5
5.2.4
5.1.6
5.0.8
5.4
5.3.2
5.1.5
5.2.3
5.3.1
5.0.7
5.3
4.4.8
5.2.2
5.1.4
5.2.1
4.4.7
5.1.3
5.0.6
5.2
4.3.7
5.0.5
5.1.2
4.4.6
5.0.4
4.3.6
5.1.1
5.0.3
5.1
4.2.5
4.4.5
5.0.2
4.3.5
5.0.1
4.4.4
4.1.4
5.0
4.4.3
4.3.4
4.2.4
4.4.2
v4.4.1
4.3.3
4.1.3
4.4.1
4.2.3
3.3.6
4.3.2
4.0.4
4.4
4.3.1
4.1.2
4.0.3
4.2.2
4.3
4.2.1
3.3.5
4.1.1
4.2
4.0.2
3.2.5
3.3.4
3.3.3
3.2.4
4.0.1
3.1.7
3.3.2
3.3.1
3.0.9
3.1.6
3.2.3
4.1
4.0
3.3
3.2.2
3.2.1
3.2
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0
2.1.1
2.1
2.0
1.0
0.9
Vulnerabilities (53)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU147294 - Out-of-bounds read CVE-2026-81507 |
CWE-125 | Medium | 5.5.5, 6.0.2 | 07.09.2026 |
SB2026090793 |
||
| #VU147293 - Out-of-bounds read CVE-2026-81508 |
CWE-125 | Low | 6.0.2 | 07.09.2026 |
SB2026090792 |
||
| #VU135121 - Stack-based buffer overflow CVE-2026-55687 |
CWE-121 | Medium | 5.2.8, 5.3.6, 5.4.5, 5.5.5, 6.0.2 | 24.06.2026 |
SB2026052152 |
||
| #VU132087 - Out-of-bounds read CVE-2026-45160 |
CWE-125 | Medium | 5.2.8, 5.3.6, 5.4.5, 5.5.5, 6.0.2 | 21.05.2026 |
SB2026052152 |
||
| #VU131782 - Out-of-bounds read CVE-2026-46532 |
CWE-125 | Low | 5.5.4, 6.0.1 | 19.05.2026 |
SB2026051912 |
||
| #VU131731 - Heap-based Buffer Overflow CVE-2026-45542 |
CWE-122 | Medium | 6.0.1 | 18.05.2026 |
SB2026051362 |
||
| #VU131603 - NULL Pointer Dereference CVE-2026-45541 |
CWE-476 | Medium | 6.0.1 | 16.05.2026 |
SB2026051362 |
||
| #VU131334 - Buffer overflow CVE-2025-55297 |
CWE-120 | Medium | 5.0.9, 5.1.6, 5.2.5, 5.3.3, 5.4.1 | 13.05.2026 |
SB2026051363 |
||
| #VU131333 - Out-of-bounds write CVE-2026-45328 |
CWE-787 | Low | 6.0.1 | 13.05.2026 |
SB2026051362 |
||
| #VU131332 - Out-of-bounds read CVE-2026-45329 |
CWE-125 | Low | 6.0.1 | 13.05.2026 |
SB2026051362 |
||
| #VU122301 - Integer underflow CVE-2026-25532 |
CWE-191 | Medium | 5.1.7, 5.2.6 | 04.02.2026 |
SB2026020442 |
||
| #VU122245 - Use After Free CVE-2026-25507 |
CWE-416 | Medium | 5.1.7 | 03.02.2026 |
SB2026020318 |
||
| #VU122244 - Out-of-bounds read CVE-2026-25508 |
CWE-125 | Medium | 5.1.7 | 03.02.2026 |
SB2026020318 |
||
| #VU120370 - Out-of-bounds write CVE-2025-68473 |
CWE-787 | Medium | 5.5.2 | 26.12.2025 |
SB20251226110 |
||
| #VU120368 - Out-of-bounds write CVE-2025-68474 |
CWE-787 | Medium | 5.5.2 | 26.12.2025 |
SB20251226110 |
||
| #VU118997 - Out-of-bounds read CVE-2025-66409 |
CWE-125 | Low | 5.5.2 | 02.12.2025 |
SB2025120229 |
||
| #VU118637 - Out-of-bounds read CVE-2025-65092 |
CWE-125 | Medium | 5.5.2 | 20.11.2025 |
SB2025112011 |
||
| #VU118615 - Improper Check for Unusual or Exceptional Conditions CVE-2025-64342 |
CWE-754 | Medium | 5.2.6, 5.4.3 | 19.11.2025 |
SB2025111915 |
||
| #VU113002 - Integer underflow CVE-2025-52471 |
CWE-191 | High | 5.2.6, 5.3.4, 5.4.2 | 16.07.2025 |
SB20250716127 |
||
| #VU131331 - Generation of Weak Initialization Vector (IV) CVE-2024-53845 |
CWE-1204 | Medium | 5.3.2 | 11.12.2024 |
SB20241211101 |
Showing elements 1 - 20 out of 53