Bluetooth Stack Vulnerability in ESP32 Devices from Espressif
CVE-2026-81507
What is CVE-2026-81507?
The ESP-IDF framework by Espressif is susceptible to a vulnerability in its BlueDroid L2CAP configuration option processing. Prior to specific versions, the configuration-option processing does not adequately validate the lengths of options against the total bytes received, allowing an unauthenticated Bluetooth peer to send a malformed L2CAP configuration request. This can lead to potential out-of-bounds read situations, which may reveal adjacent memory contents in the Bluetooth stack under certain runtime conditions. The affected versions include those prior to 5.2.8, 5.3.6, 5.5.5, 6.0.3, and 6.1-rc1. It is crucial for users to upgrade to these versions to mitigate the risk.
Affected Version(s)
esp-idf < 5.2.8 < 5.2.8
esp-idf >= 5.3-beta1, < 5.3.6 < 5.3-beta1, 5.3.6
esp-idf >= 5.4-beta1, < 5.5.5 < 5.4-beta1, 5.5.5