Known vulnerabilities in ESP-IDF - page 2

Software: ESP-IDF
Software CPE: cpe:2.3:a:espressif_systems:esp-idf:*:*:*:*:*:*:*:*
Total vulnerabilities: 53
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ESP-IDF ESP-IDF is affected by 53 known vulnerabilities: 9 high, 22 medium, 22 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88227 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24746
CWE-835 Medium
No
No
5.3 09.04.2024 SB2024040940
SB2024072946
#VU131330 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2024-28183
CWE-367 Low
No
No
4.4.7, 5.1.4, 5.2.1 25.03.2024 SB2024032593
#VU86768 - Improper Authentication
CVE-2023-52160
CWE-287 Medium
Available
No
5.3 23.02.2024 SB2024022343
SB2024022345
SB2024022346
and 11 more
#VU131329 - Out-of-bounds write
CVE-2022-24893
CWE-787 High
No
No
4.1.4, 4.2.4, 4.3.3, 4.4.2 23.06.2022 SB2022062354
#VU59839 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23303
CWE-327 Low
No
No
4.3.5 19.01.2022 SB2022011930
SB2022011945
SB2022021835
and 10 more
#VU59838 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23304
CWE-327 Low
No
No
4.3.5 19.01.2022 SB2022011930
SB2022011945
SB2022021835
and 8 more
#VU56313 - Improper input validation
CVE-2021-31717
CWE-20 Low
No
No
4.4 06.09.2021 SB2021090602
SB2021090603
SB2021090604
and 1 more
#VU56312 - Improper input validation
CVE-2021-28155
CWE-20 Low
No
No
4.4 06.09.2021 SB2021090602
SB2021090603
SB2021090604
and 1 more
#VU56311 - Improper input validation
CVE-2021-28135
CWE-20 Low
No
No
4.4 06.09.2021 SB2021090602
SB2021090603
SB2021090604
and 1 more
#VU56310 - Memory corruption
CVE-2021-28136
CWE-119 Low
No
No
4.4 06.09.2021 SB2021090602
SB2021090603
SB2021090604
#VU56308 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28139
CWE-94 Medium
No
No
4.4 06.09.2021 SB2021090602
SB2021090603
SB2021090604
#VU53175 - Improper input validation
CVE-2020-26142
CWE-20 Low
No
No
5.1.3, 5.3 12.05.2021 SB2021051212
SB2021051810
SB2021051811
and 11 more
#VU23961 - Improper Authentication
CVE-2019-9496
CWE-287 Medium
No
No
4.3.5 06.01.2020 SB2019041715
SB2020010606
SB2020021601
and 9 more
#VU23959 - Exposure of sensitive information to an unauthorized actor
CVE-2019-9494
CWE-200 Medium
No
No
4.3.5 06.01.2020 SB2019041715
SB2020010605
SB2020021601
and 10 more
#VU8842 - Key Management Errors
CVE-2017-13082
CWE-320 High
No
No
4.3.5, 5.0.1 17.10.2017 SB2017101702
SB2017101707
SB2017101801
and 24 more
#VU8841 - Key Management Errors
CVE-2017-13081
CWE-320 High
No
No
4.3.5, 5.0.1 17.10.2017 SB2017101702
SB2017101704
SB2017101706
and 30 more
#VU8840 - Key Management Errors
CVE-2017-13080
CWE-320 Medium
No
No
4.3.5, 5.0.1 17.10.2017 SB2017101702
SB2017101703
SB2017101704
and 78 more
#VU8839 - Key Management Errors
CVE-2017-13079
CWE-320 High
No
No
4.3.5, 5.0.1 17.10.2017 SB2017101702
SB2017101704
SB2017101706
and 27 more
#VU8838 - Key Management Errors
CVE-2017-13078
CWE-320 High
No
No
4.3.5, 5.0.1 17.10.2017 SB2017101702
SB2017101704
SB2017101706
and 30 more
#VU8837 - Key Management Errors
CVE-2017-13077
CWE-320 High
No
No
4.3.5, 5.0.1 17.10.2017 SB2017101702
SB2017101704
SB2017101706
and 27 more


Showing elements 21 - 40 out of 53