Skip to content
OpenAdvisories

Product · espressif

esp-usb

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-68657

    espressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path

    Espressif ESP-IDF USB Host HID (Human Interface Device) Driver allows access to HID devices. Prior to 1.1.0, calls to hid_host_device_close() can free the same usb_transfer_t twice. The USB event callback and user code share the hid_iface_t state without lock…

    espressif esp-usb
  • Medium 6.8
    CVE-2025-68656

    Espressif ESP-IDF USB Host HID (Human Interface Device) Driver Descriptor Use-After-Free Vulnerability

    Espressif ESP-IDF USB Host HID (Human Interface Device) Driver allows access to HID devices. Prior to 1.1.0, usb_class_request_get_descriptor() frees and reallocates hid_device->ctrl_xfer when an oversized descriptor is requested but continues to use the stal…

    espressif esp-usb
  • Medium 6.8
    CVE-2025-68622

    Espressif ESP-IDF USB Host UVC Class Driver has a stack buffer overflow in UVC descriptor printing

    Espressif ESP-IDF USB Host UVC Class Driver allows video streaming from USB cameras. Prior to 2.4.0, a vulnerability in the esp-usb UVC host implementation allows a malicious USB Video Class (UVC) device to trigger a stack buffer overflow during configuration…

    espressif esp-usb