ES
Vendor
espressif
89
CVEs
0
On KEV
1
New 30D
Products
ES9.8
esp-idf
espressif
37 CVEs0 on KEV1 new
AR9.9
arduino-esp32
espressif
7 CVEs0 on KEV0 new
EN8.1
Esp8266 Nonos Sdk
Espressif
4 CVEs0 on KEV0 new
ES6.8
esp-usb
espressif
3 CVEs0 on KEV0 new
ES6.5
esp-now
espressif
2 CVEs0 on KEV0 new
EF7.5
Esp32 Firmware
Espressif
2 CVEs0 on KEV0 new
EF6.8
Esp32-pico-d4 Firmware
Espressif
2 CVEs0 on KEV0 new
UH6.8
Usb Host Hid Driver
Espressif
2 CVEs0 on KEV0 new
AE6.5
Arduino Esp8266
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp-eye Firmware
Espressif
1 CVEs0 on KEV0 new
ES6.8
ESP32
Espressif
1 CVEs0 on KEV0 new
EF4.6
Esp32-d0wd Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-d0wd-v3 Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-d0wdr2-v3 Firmware
Espressif
1 CVEs0 on KEV0 new
EF4.6
Esp32-d2wd Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-devkitc Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-devkitm-1 Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-mini-1 Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-mini-1u Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-pico-kit Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-pico-mini-02 Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-pico-mini-02u Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-pico-v3-02 Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-pico-v3 Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-pico-v3-zero-devkit Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-pico-v3-zero Firmware
Espressif
1 CVEs0 on KEV0 new
EF4.6
Esp32-s0wd Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-u4wdh Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-vaquita-dspg Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-wroom-32e Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-wroom-32ue Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-wroom-da Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-wrover-e Firmware
Espressif
1 CVEs0 on KEV0 new
EF6.8
Esp32-wrover-ie Firmware
Espressif
1 CVEs0 on KEV0 new
ER6.8
Esp8266 Rtos Sdk
Espressif
1 CVEs0 on KEV0 new
ES7.5
Esptool
Espressif
1 CVEs0 on KEV0 new
SH8.2
shared-github-dangerjs
espressif
1 CVEs0 on KEV0 new
UH6.8
Usb Host Uvc Class Driver
Espressif
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-81507 | ES esp-idf espressif | 6.5 | Oct 13 | ESF-IDF: Bluetooth Classic L2CAP Heap Memory Disclosure Allowing Unauthorized Access to Sensitive Data |
| CVE-2026-81508 | ES esp-idf espressif | 4.3 | Sep 24 | ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing |
| CVE-2026-55687 | ES esp-idf espressif | 7.5 | Jul 10 | ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing |
| CVE-2026-46532 | ES esp-idf espressif | 4.6 | Jun 10 | ESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser |
| CVE-2026-45542 | ES esp-idf espressif | 7.1 | Jun 10 | ESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth |
| CVE-2026-45329 | ES esp-idf espressif | 6.5 | Jun 10 | ESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers |
| CVE-2026-45328 | ES esp-idf espressif | 8.8 | Jun 10 | ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers |
| CVE-2026-45160 | ES esp-idf espressif | 6.5 | Jun 10 | ESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parser |
| CVE-2026-45541 | ES esp-idf espressif | 7.5 | Jun 10 | ESF-IDF: Remote Null Pointer Dereference in WebSocket Server |
| CVE-2026-44358 | SH shared-github-dangerjs espressif | 8.2 | May 28 | Espressif Shared GitHub DangerJS: Untrusted Search Path in DangerJS Action Entrypoint |
| CVE-2026-42854 | AR arduino-esp32 espressif | 9.8 | May 12 | arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCE |
| CVE-2026-42855 | AR arduino-esp32 espressif | 7.5 | May 12 | arduino-esp32: Digest authentication URI mismatch bypass in WebServer allows cross-resource replay attack |
| CVE-2026-41429 | AR arduino-esp32 espressif | 8.8 | Apr 24 | Improper validation of NBNS name_len in arduino-esp32 NetBIOS leads to memory corruption |
| CVE-2026-25508 | ES esp-idf espressif | 6.3 | Feb 4 | ESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning |
| CVE-2026-25507 | ES esp-idf espressif | 6.3 | Feb 4 | ESF-IDF Has Use-after-free Vulnerability in BLE Provisioning |
| CVE-2026-25532 | ES esp-idf espressif | 8.0 | Feb 4 | ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow |
| CVE-2025-68657 | ES esp-usb espressif | 6.4 | Jan 12 | espressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path |
| CVE-2025-68656 | ES esp-usb espressif | 6.8 | Jan 12 | Espressif ESP-IDF USB Host HID (Human Interface Device) Driver Descriptor Use-After-Free Vulnerability |
| CVE-2025-68622 | ES esp-usb espressif | 6.8 | Jan 12 | Espressif ESP-IDF USB Host UVC Class Driver has a stack buffer overflow in UVC descriptor printing |
| CVE-2025-68474 | ES esp-idf espressif | 7.6 | Dec 26 | ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling |
| CVE-2025-68473 | ES esp-idf espressif | 8.6 | Dec 26 | ESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handling |
| CVE-2025-66409 | ES esp-idf espressif | 9.1 | Dec 2 | ESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling |
| CVE-2025-65092 | ES esp-idf espressif | 6.9 | Nov 21 | ESP32-P4 JPEG Decoder Header Parsing Vulnerability |
| CVE-2025-64342 | ES esp-idf espressif | 6.9 | Nov 17 | ESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability |
| CVE-2025-55297 | ES esp-idf espressif | 8.8 | Aug 21 | ESF-IDF BluFi Example Memory Overflow Vulnerability |
| CVE-2025-53540 | AR arduino-esp32 espressif | 8.7 | Jul 7 | CSRF Vulnerability in Firmware Update Endpoints Allows Remote Code Execution |
| CVE-2025-53007 | AR arduino-esp32 espressif | 8.9 | Jun 26 | arduino-esp32 vulnerable to CRLF injection in WebServer.cpp |
| CVE-2025-52471 | ES esp-idf espressif | 9.8 | Jun 24 | ESP-NOW Integer Underflow Vulnerability Advisory |
| CVE-2024-53406 | ES Esp-idf Espressif | 8.8 | Mar 13 | Espressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in Authentication bypass |
| CVE-2025-27840 | ES ESP32 Espressif | 6.8 | Mar 8 | Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory) |
| CVE-2024-53845 | ES esp-idf espressif | 6.6 | Dec 11 | AES/CBC Constant IV Vulnerability in ESPTouch v2 |
| CVE-2024-51428 | ES Esp-idf Espressif | 7.5 | Nov 7 | An issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service (DoS) via a crafted data channel packet |
| CVE-2024-33453 | ES Esp-idf Espressif | 8.1 | Oct 17 | Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive information via the externalId component |
| CVE-2024-45798 | AR arduino-esp32 espressif | 9.9 | Sep 17 | Multiple Poisoned Pipeline Execution (PPE) vulnerabilities |
| CVE-2024-42483 | ES esp-now espressif | 6.5 | Sep 12 | ESP-NOW Replay Attacks Vulnerability |
| CVE-2024-42484 | ES esp-now espressif | 6.5 | Sep 12 | ESP-NOW OOB Vulnerability In Group Type Message |
| CVE-2024-33454 | ES Esp-idf Espressif | 6.5 | May 9 | Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the Bluetooth stack component |
| CVE-2024-28183 | ES esp-idf espressif | 5.7 | Mar 25 | Anti Rollback bypass with physical access and TOCTOU attack |
| CVE-2023-46894 | ES Esptool Espressif | 7.5 | Nov 9 | An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm |
| CVE-2023-35818 | EF Esp32-pico-v3-zero-devkit Firmware Espressif | 6.8 | Jul 17 | An issue was discovered on Espressif ESP32 3.0 (ESP32_rev300 ROM) devices |
| CVE-2022-24893 | ES esp-idf espressif | 8.8 | Jun 25 | Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption |
| CVE-2021-28139 | ES Esp-idf Espressif | 8.8 | Sep 7 | The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet,… |
| CVE-2021-28135 | ES Esp-idf Espressif | 6.5 | Sep 7 | The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in… |
| CVE-2021-28136 | ES Esp-idf Espressif | 6.5 | Sep 7 | The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of multiple LMP IO Capability Request packets during the pairing… |
| CVE-2021-34173 | EF Esp32 Firmware Espressif | 7.5 | Jul 14 | An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa frame |
| CVE-2020-16146 | ES Esp-idf Espressif | 7.5 | Jan 12 | Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.7, 3.2.x through 3.2.3, 3.3.x through 3.3.2, and 4.0.x through 4.0.1 has a Buffer Overflow in BluFi provisioning in… |
| CVE-2020-13595 | ES Esp-idf Espressif | 6.5 | Aug 31 | The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.0 through 4.2 (for ESP32 devices) returns the wrong number of completed BLE packets and triggers a… |
| CVE-2020-13594 | ES Esp-idf Espressif | 6.5 | Aug 31 | The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.2 and earlier (for ESP32 devices) does not properly restrict the channel map field of the… |
| CVE-2020-12638 | ES Esp-idf Espressif | 6.8 | Jul 23 | An encryption-bypass issue was discovered on Espressif ESP-IDF devices through 4.2, ESP8266_NONOS_SDK devices through 3.0.3, and ESP8266_RTOS_SDK devices through 3.3 |
| CVE-2019-17391 | EF Esp32-pico-d4 Firmware Espressif | 4.6 | Nov 14 | An issue was discovered in the Espressif ESP32 mask ROM code 2016-06-08 0 through 2 |
| CVE-2019-15894 | ES Esp-idf Espressif | 6.8 | Oct 7 | An issue was discovered in Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1 |
| CVE-2019-12586 | EN Esp8266 Nonos Sdk Espressif | 6.5 | Sep 4 | The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 processes EAP Success messages before any EAP method completion or… |
| CVE-2019-12588 | AE Arduino Esp8266 Espressif | 6.5 | Sep 4 | The client 802.11 mac implementation in Espressif ESP8266_NONOS_SDK 2.2.0 through 3.1.0 does not validate correctly the RSN AuthKey suite list count in beacon frames, probe… |
| CVE-2019-12587 | ES Esp-idf Espressif | 8.1 | Sep 4 | The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key (PMK) after… |
| CVE-2018-18558 | ES Esp-idf Espressif | 6.4 | May 13 | An issue was discovered in Espressif ESP-IDF 2.x and 3.x before 3.0.6 and 3.1.x before 3.1.1 |