AR
Product
arduino-esp32
7
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 1Low 0
Watch
Add arduino-esp32 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-45798 | 9.9 | Sep 17 | Multiple Poisoned Pipeline Execution (PPE) vulnerabilities Affected: Commits prior to a7cec020df8f1a815bd8dfd2559f51a2216bcf1c |
| CVE-2026-42854 | 9.8 | May 12 | arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCE Affected: < 3.3.8 |
| CVE-2025-53007 | 8.9 | Jun 26 | arduino-esp32 vulnerable to CRLF injection in WebServer.cpp Affected: < 3.2.1; >= 3.3.0-alpha1, < 3.3.0-RC1 |
| CVE-2026-41429 | 8.8 | Apr 24 | Improper validation of NBNS name_len in arduino-esp32 NetBIOS leads to memory corruption Affected: < 3.3.8 |
| CVE-2025-53540 | 8.7 | Jul 7 | CSRF Vulnerability in Firmware Update Endpoints Allows Remote Code Execution Affected: < 3.2.1 |
| CVE-2026-42855 | 7.5 | May 12 | arduino-esp32: Digest authentication URI mismatch bypass in WebServer allows cross-resource replay attack Affected: < 3.3.8 |
| CVE-2019-12586 | 6.5 | Sep 4 | The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 processes EAP Success messages before any EAP method completion or… Affected: through 1.0.2; 1.0.3; 1.0.3; 1.0.3 |
Showing 7