CVE-2026-46532 ESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser

🗓️ 10 Jun 2026 00:35:30Reported by GoogleType

osv🔗 osv.dev👁 1 Views

CVE-2026-46532 affects ESF-IDF by a heap out-of-bounds read in the Bluedroid AVRCP target parser. Patches exist in later versions.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2026-46532	10 Jun 202605:03	–	circl
CNNVD	ESP-IDF 缓冲区错误漏洞	10 Jun 202600:00	–	cnnvd
CVE	CVE-2026-46532	10 Jun 202600:35	–	cve
Cvelist	CVE-2026-46532 ESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser	10 Jun 202600:35	–	cvelist
EUVD	EUVD-2026-35919	10 Jun 202600:35	–	euvd
NVD	CVE-2026-46532	10 Jun 202602:16	–	nvd
Positive Technologies	PT-2026-48354	10 Jun 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-46532	11 Jun 202602:59	–	redhatcve
Vulnrichment	CVE-2026-46532 ESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser	10 Jun 202600:35	–	vulnrichment

Source	Link
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46532.json
github	www.github.com/espressif/esp-idf/security/advisories/GHSA-3pp8-42fh-3j3c
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-46532
github	www.github.com/espressif/esp-idf/commit/56053c4d1f37955ccf296cf2f6dfd0f7ebd4fae6
github	www.github.com/espressif/esp-idf/commit/60f9362f83a05942069532f357c234cd5e5d4302
github	www.github.com/espressif/esp-idf/commit/7c004d3fe3022f5f0db98dd1b2d0648a3a9cfb3f
github	www.github.com/espressif/esp-idf/commit/8746e5f7e762ead84d2902edec34d84cdd701b2b
github	www.github.com/espressif/esp-idf/commit/b0959b5ab1dc60398a916c80f14b1816780c801e
github	www.github.com/espressif/esp-idf/commit/c53d05ae526607ca5eae9ffedaf57775eec33a4f

08 Jul 2026 08:02Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.14.6

EPSS0.00228