Skip to content
OpenAdvisories

Vendor

espressif

39 known vulnerabilities.

Products

esp-idf 25 arduino-esp32 6 esp-usb 3 esp-now 2 esp-protocols 1 ESP32 1 shared-github-dangerjs 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.7
    CVE-2025-66409

    ESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling

    ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, when AVRCP is enabled on ESP32, receiving a malformed VENDOR DEPENDENT command from a peer device can cause the Bluetooth stack to acce…

    espressif esp-idf