CVE-2026-45328 ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers

🗓️ 10 Jun 2026 00:33:43Reported by GitHub_MType

Out-of-bounds write in Espressif ESP-Tee secure service wrappers in ESF-IDF; patched in five five five and six zero one.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2026-45328	10 Jun 202603:00	–	circl
CNNVD	ESP-IDF 输入验证错误漏洞	10 Jun 202600:00	–	cnnvd
CVE	CVE-2026-45328	10 Jun 202600:33	–	cve
EUVD	EUVD-2026-35916	10 Jun 202600:33	–	euvd
NVD	CVE-2026-45328	10 Jun 202602:16	–	nvd
Positive Technologies	PT-2026-48350	10 Jun 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-45328	11 Jun 202602:59	–	redhatcve
Vulnrichment	CVE-2026-45328 ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers	10 Jun 202600:33	–	vulnrichment

[
  {
    "vendor": "espressif",
    "product": "esp-idf",
    "versions": [
      {
        "version": "= 5.5.4",
        "status": "affected"
      },
      {
        "version": "= 6.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/espressif/esp-idf/commit/afd14ab113acd0ca369965404c99ac42e74d4fcd
github	www.github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b
github	www.github.com/espressif/esp-idf/commit/764626a1b7c85b943d207da08a2f8f7d7f3def4d
github	www.github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6
github	www.github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f
github	www.github.com/espressif/esp-idf/security/advisories/GHSA-mmgp-73p4-92xp
github	www.github.com/espressif/esp-idf/commit/440a5d1906502023f2a0fb0aecbdf0602d14acbf

10 Jun 2026 00:33Current

CVSS 3.19.3

EPSS0.00126