Vulnerability in Espressif IoT Development Framework for ESP32 Devices
CVE-2026-113780
What is CVE-2026-113780?
The Espressif Internet of Things Development Framework's handling of caller-controlled register frames through incorrect stack pointer management can break the isolation between the Rich Execution Environment (REE) and the Trusted Execution Environment (TEE). This occurs when a local unprivileged REE application exploits the vulnerabilities in the esp_tee vectors, allowing it to manipulate TEE-exclusive memory on ESP32-C5, ESP32-C6, ESP32-C61, and ESP32-H2 devices. Consequently, this could lead to potential code execution, denial of service, or undesirable system crashes due to corrupted TEE control-flow data. The vulnerability is addressed in version 5.5.6 and subsequent versions 6.0.4 and 6.1.1.
Affected Version(s)
esp-idf < 5.5.6 < 5.5.6
esp-idf >= 6.0.0, < 6.0.4 < 6.0.0, 6.0.4
esp-idf >= 6.1.0, < 6.1.1 < 6.1.0, 6.1.1