Bluetooth Classic Vulnerability in Espressif ESP-IDF Products
CVE-2021-28139

8.8HIGH

Key Information:

Vendor: Espressif
Status: Esp-idf
Vendor: CVE Published:; 7 September 2021

What is CVE-2021-28139?

The Bluetooth Classic implementation in Espressif's ESP-IDF 4.4 and earlier versions contains a critical flaw that undermines Feature Page restrictions. This weakness allows malicious actors within radio range to exploit the vulnerability by sending a specially crafted Extended Features bitfield payload, which can lead to arbitrary code execution on the ESP32. This poses a significant risk to devices utilizing the affected versions, highlighting the need for immediate patches and enhanced security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch