CVE-2025-68657 espressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path

🗓️ 12 Jan 2026 17:26:51Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

CVE-2025-68657: Espressif ESP-IDF USB Host HID double free race on device close; fixed in 1.1.0.

Reporter	Title	Published	Views	Family All 8
CNNVD	Espressif ESP-IDF 安全漏洞	12 Jan 202600:00	–	cnnvd
CVE	CVE-2025-68657	12 Jan 202617:26	–	cve
Cvelist	CVE-2025-68657 espressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path	12 Jan 202617:26	–	cvelist
EUVD	EUVD-2025-206281	12 Jan 202617:26	–	euvd
NVD	CVE-2025-68657	12 Jan 202618:15	–	nvd
Positive Technologies	PT-2026-2285	12 Jan 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-68657	13 Jan 202622:53	–	redhatcve
Vulnrichment	CVE-2025-68657 espressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path	12 Jan 202617:26	–	vulnrichment

Source	Link
components	www.components.espressif.com/components/espressif/usb_host_hid/versions/1.1.0/changelog
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68657.json
github	www.github.com/espressif/esp-usb/security/advisories/GHSA-gp8r-qjfr-gqfv
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-68657
github	www.github.com/espressif/esp-usb/commit/cd28106e9f72ac2719682c06f94601f9f034390b

12 Apr 2026 22:06Current

7High risk

Vulners AI Score7

CVSS 3.16.4

EPSS0.00025

double free race condition usb host hid device close path espressif esp-idf version 1.1.0