CVE-2026-45329

🗓️ 10 Jun 2026 00:34:09Reported by GitHub_MType

ESF-IDF (Espressif IoT Development Framework) contains a vulnerability in ESP-TEE secure-service wrappers (esp_secure_services.c and esp_secure_services_iram.c) affecting versions 5.5.4 and 6.0. Several caller-supplied pointer arguments were not f...

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2026-45329 ESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers	10 Jun 202600:34	–	cvelist
EUVD	EUVD-2026-35917	10 Jun 202600:34	–	euvd
NVD	CVE-2026-45329	10 Jun 202602:16	–	nvd
Positive Technologies	PT-2026-48351	10 Jun 202600:00	–	ptsecurity

Vulners

Node

espressif esp-idfMatch6.0

espressif esp-idfMatch5.5.4

[
  {
    "vendor": "espressif",
    "product": "esp-idf",
    "versions": [
      {
        "version": "= 6.0",
        "status": "affected"
      },
      {
        "version": "= 5.5.4",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b
github	www.github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6
github	www.github.com/espressif/esp-idf/security/advisories/GHSA-w82j-7q63-7pqm
github	www.github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f

10 Jun 2026 02:16Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.17.1