CVE-2026-51268

creationtimestamp| type| source ---|---|--- 2026-07-30 18:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrv477ouem2k 2026-07-30 20:01:35+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrva6zooad2n...

CVE-2026-51268

CVE-2026-51268 affects schreibfaul1 ESP32-audioI2S version 3.4.5. The heap-based buffer overflow arises in the host parsing logic: dismantle_host() parses untrusted host/URL input, and subsequent code uses clone_from() to copy parsed host, request host, extension, and query_string into fixed heap...