CVE-2026-113780

🗓️ 04 Nov 2026 19:04:21Reported by GitHub_MType

Unvalidated stack pointer in ESF-IDF esp_tee trap entry allows local REE code execution.

Reporter	Title	Published	Views	Family All 4
Circl	CVE-2026-113780	4 Nov 202619:13	–	circl
Cvelist	CVE-2026-113780 ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary	4 Nov 202619:04	–	cvelist
EUVD	EUVD-2026-117053	4 Nov 202619:04	–	euvd
NVD	CVE-2026-113780	4 Nov 202619:17	–	nvd

Vulners

Node

espressif esp-idfRange<5.5.6

espressif esp-idfRange6.0.0–6.0.4

espressif esp-idfRange6.1.0–6.1.1

[
  {
    "vendor": "espressif",
    "product": "esp-idf",
    "versions": [
      {
        "version": "< 5.5.6",
        "status": "affected"
      },
      {
        "version": ">= 6.0.0, < 6.0.4",
        "status": "affected"
      },
      {
        "version": ">= 6.1.0, < 6.1.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/espressif/esp-idf/security/advisories/GHSA-49x8-xqjg-2pjg
github	www.github.com/espressif/esp-idf/commit/773761abb893d43d0a5b8b75ec0a1c2cf0287d53
github	www.github.com/espressif/esp-idf/commit/dabd37fae8d2a7b1cc71f48fce824b0b9d909a07
github	www.github.com/espressif/esp-idf/commit/acb7d996b07293abf591b93f4aaffa04ae6732d9
github	www.github.com/espressif/esp-idf/commit/b85a7b0e1449ac9aec30a0c3e3b6515725556fd1
github	www.github.com/espressif/esp-idf/releases/tag/v5.5.6

04 Nov 2026 19:17Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.3