Skip to content
OpenAdvisories

Product · espressif

esp-idf

25 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-113780

    ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary

    ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.5.5 until 5.5.6, 6.0.4, and 6.1.1, the esp_tee trap entry in esp_tee_vectors_plic.S and esp_tee_vectors_clic.S saves a caller-controlled register frame through the REE-supplied st…

    espressif esp-idf
  • Critical 9.3
    CVE-2026-45328

    ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers

    ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, the esp_tee component exposes secure-service wrappers in esp_secure_services.c and esp_secure_services_iram.c that bridge calls from the user application (i.e.…

    espressif esp-idf