espressif Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by espressif

JSON RSS CSV 🔔 Create Alert Trigger

7 July 2025

Cross-Site Request Forgery Vulnerability in Arduino Core for ESP32 Microcontrollers
CVE-2025-53540
EspressifArduino-esp328.7HIGH

26 June 2025

HTTP Response Splitting Vulnerability in Arduino ESP32 by Espressif
CVE-2025-53007
EspressifArduino-esp328.9HIGH

24 June 2025

Integer Underflow Vulnerability in ESP-NOW Protocol of Espressif's IOT Development Framework
CVE-2025-52471
EspressifEsp-idf7.2HIGH

13 March 2025

Insecure Permissions in Espressif IDF Affects Device Authentication
CVE-2024-53406
EspressifEspressif IDF8.8HIGH

9 November 2023

Weak Cryptographic Algorithm in Espressif's Esptool 4.6.2
CVE-2023-46894
EspressifEsptool7.5HIGH

25 June 2022

Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption
CVE-2022-24893
EspressifEsp-idf7.5HIGH

7 September 2021

Bluetooth Classic Vulnerability in Espressif ESP-IDF Products
CVE-2021-28139
EspressifEsp-idf8.8HIGH

14 July 2021

Denial of Service Vulnerability in Espressif ESP32 Products
CVE-2021-34173
EspressifEsp32 Firmware7.5HIGH

12 January 2021

Buffer Overflow in Espressif ESP-IDF BluFi Protocol
CVE-2020-16146
EspressifEsp-idf7.5HIGH

4 September 2019

EAP Vulnerability in Espressif Products Allows Zero PMK Installation
CVE-2019-12587
EspressifEsp8266 Nonos Sdk8.1HIGH

No more vulnerabilities to load.