Known vulnerabilities in ESP-IDF - page 3

Software: ESP-IDF
Software CPE: cpe:2.3:a:espressif_systems:esp-idf:*:*:*:*:*:*:*:*
Total vulnerabilities: 53
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ESP-IDF ESP-IDF is affected by 53 known vulnerabilities: 9 high, 22 medium, 22 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU54288 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-27926
CWE-367 Low
No
No
4.2.2, 3.3.6, 4.0.3 21.06.2021 SB2021062109
SB2021070408
#VU53585 - Improper Access Control
CVE-2020-26560
CWE-284 Low
No
No
3.3.6, 4.0.3 26.05.2021 SB2021052614
SB2021070408
#VU53583 - Security Features
CVE-2020-26559
CWE-254 Low
No
No
3.3.6, 4.0.3 26.05.2021 SB2021052614
SB2021070408
#VU53582 - Security Features
CVE-2020-26557
CWE-254 Low
No
No
3.3.6, 4.0.3 26.05.2021 SB2021052614
SB2021070408
#VU53581 - Improper Authentication
CVE-2020-26556
CWE-287 Low
No
No
3.3.6, 4.0.3 26.05.2021 SB2021052614
SB2021070408
#VU53579 - Security Features
CVE-2020-26558
CWE-254 Low
No
No
3.3.6, 4.0.3, 4.2.2 26.05.2021 SB2021052614
SB2021060801
SB2021061709
and 29 more
#VU53578 - Improper Access Control
CVE-2020-26555
CWE-284 Low
No
No
4.0.3, 4.3 26.05.2021 SB2021052614
SB2021060801
SB2021061709
and 35 more
#VU52769 - Integer overflow
CVE-2021-31572
CWE-190 High
No
No
4.3 30.04.2021 SB2021043001
SB2021061814
#VU52768 - Integer overflow
CVE-2021-31571
CWE-190 High
No
No
3.3.6, 4.0.3, 4.2.2, 4.3 30.04.2021 SB2021043001
SB2021061814
SB2021062109
and 1 more
#VU30732 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2019-15894
CWE-74 Medium
No
No
3.3.1 07.10.2019 SB2019100726
#VU20953 - Improper input validation
CVE-2018-18558
CWE-20 Low
No
No
3.0.6, 3.1.1 10.09.2019 SB2019051304
#VU20952 - Improper input validation
CVE-2019-12586
CWE-20 Low
No
No
- 10.09.2019 SB2019091003
#VU20936 - Improper input validation
CVE-2019-12587
CWE-20 Medium
No
No
- 09.09.2019 SB2019091003


Showing elements 41 - 60 out of 53