CVE-2026-25532

all versions

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, a vuln

6.3MEDIUM

CVE-2026-25508

all versions

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, an out

6.3MEDIUM

CVE-2026-25507

all versions

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, a use-

6.3MEDIUM

CVE-2025-68474

all versions

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlie

7.6HIGH

CVE-2025-68473

all versions

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlie

8.6HIGH

CVE-2025-66409

<= 5.1.6

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, when A

9.1CRITICAL

CVE-2025-55297

< 5.0.9

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. The BluFi example bundled in ESP-IDF was vulnerable to me

8.8HIGH

CVE-2025-52471

all versions

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. An integer underflow vulnerability has been identified in

9.8CRITICAL

CVE-2024-53406

all versions

Espressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in Authentication bypass. In the reconnection phase, the

8.8HIGH

CVE-2024-51428

all versions

An issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service (DoS) via a crafted data channel packet.

7.5HIGH

CVE-2024-33453

all versions

Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive information via the externalId compone

8.1HIGH

CVE-2024-33454

all versions

Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the Blue

6.5MEDIUM

CVE-2024-28183

all versions

ESP-IDF is the development framework for Espressif SoCs supported on Windows, Linux and macOS. A Time-of-Check to Time-of-Use (TOC

6.1MEDIUM

CVE-2022-24893

all versions

ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK (ESP-BLE-MESH), a memory c

7.5HIGH

CVE-2021-28139

<= 4.4

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon recepti

8.8HIGH

CVE-2021-28136

<= 4.4

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of multiple LMP I

6.5MEDIUM

CVE-2021-28135

<= 4.4

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of continuous uns

6.5MEDIUM

CVE-2020-16146

>= 2.0.0 and <= 2.1.1

Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.7, 3.2.x through 3.2.3, 3.3.x through 3.3.2, and 4.0.x through 4.0.1

7.5HIGH

CVE-2020-13595

>= 4.0.0 and <= 4.2

The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.0 through 4.2 (for ESP32 devices) returns the wron

6.5MEDIUM

CVE-2020-13594

<= 4.2

The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.2 and earlier (for ESP32 devices) does not properl

6.5MEDIUM

CVE-2020-12638

<= 4.2

An encryption-bypass issue was discovered on Espressif ESP-IDF devices through 4.2, ESP8266_NONOS_SDK devices through 3.0.3, and E

6.8MEDIUM

CVE-2019-15894

>= 3.0 and < 3.0.9

An issue was discovered in Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through

6.8MEDIUM

CVE-2019-12586

>= 2.0.0 and <= 4.0.0

The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 processes EAP Succe

6.5MEDIUM

CVE-2019-12587

>= 2.0.0 and <= 4.0.0

The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 allows the installa

8.1HIGH

CVE-2018-18558

>= 2.0 and < 3.0.6

An issue was discovered in Espressif ESP-IDF 2.x and 3.x before 3.0.6 and 3.1.x before 3.1.1. Insufficient validation of input dat

6.4MEDIUM