Buffer Overflow in Espressif ESP-IDF BluFi Protocol

CVE-2020-16146

Summary

The vulnerability occurs due to a buffer overflow in the BluFi provisioning process located in the btc_blufi_recv_handler function within blufi_prf.c of Espressif ESP-IDF. An attacker can exploit this vulnerability by sending a specially crafted BluFi protocol Write Attribute command targeting the characteristic 0xFF01. This manipulation can lead to a buffer overflow, posing significant security concerns for devices utilizing the affected versions of ESP-IDF.

References