118 matches found
CVE-2024-33453
CVE-2024-33453 Esposizione di dati sensibili tramite controllo di accesso a livello di oggetto in esp-idf Descrizione Una vulnerabilità di Buffer Overflow nel framework esp-idf versione 5.1, utilizzato da alcuni prodotti Schoolbox, consente a un attaccante remoto di ottenere informazioni sensibil...
esp32-cve-2025-27840-power-trace-experiment
esp32-cve-2025-27840-power-trace-experiment Firmware zur Erfassung eines Power-Traces des Verhaltens des Bluetooth-Moduls auf dem ESP32, wenn dem ESP32 die undokumentierten HCI-Bluetooth-Befehle CVE-2025-27840 gesendet werden. Wenn der ESP32 die Befehle empfängt, schaltet er einen GPIO-Pin um, um...
esp32_esp8266_attacks
Attacchi Wi-Fi su ESP32/ESP8266 Questo repository fa parte dei risultati di ricerca delASSET Research Group. Questo repository dimostra 3 attacchi Wi-Fi contro i popolari dispositivi IoT ESP32/8266: Zero PMK Installation CVE-2019-12587 - Dirottamento di client ESP32/ESP8266 connessi a reti...
dcsgonefirm
dcsgonefirm Note Poiché questo repository è ancora in fase di sviluppo, alcune cose in questo Readme sono contrassegnate con 'Dev:'. Sentiti libero di modificarlo se necessario. Compilazione Hai bisogno di ESP-IDF, qualsiasi versione moderna dovrebbe funzionare. Dev: Modifica questo se richiedi u...
CVE-2026-45329
ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.4 and 6.0, several ESP-TEE secure-service wrappers in espsecureservices.c and espsecureservicesiram.c validated only some of the caller-supplied pointer arguments, leaving input pointer arguments unchecked...
CVE-2026-45329 ESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers
ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.4 and 6.0, several ESP-TEE secure-service wrappers in espsecureservices.c and espsecureservicesiram.c validated only some of the caller-supplied pointer arguments, leaving input pointer arguments unchecked...
CVE-2026-45328
The CVE concerns ESF-IDF’s ESP-IDF esp_tee component. In versions 5.5.4 and 6.0, the secure-service wrappers in esp_secure_services.c and esp_secure_services_iram.c bridge calls from the REE to TEE-protected peripherals (AES, SHA, ECC, HMAC, SPI, MMU, WDT) and security features (attestation, OTA,...
CVE-2026-45160 ESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parser
ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.2.7, 5.3.5, 5.4.4, 5.5.4, and 6.0.1, an out-of-bounds read flaw exists in the DHCP server option parser parseoptions in components/lwip/apps/dhcpserver/dhcpserver.c shipped with ESP-IDF's lwIP component. The pars...
CVE-2025-68657 espressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path
Espressif ESP-IDF USB Host HID Human Interface Device Driver allows access to HID devices. Prior to 1.1.0, calls to hidhostdeviceclose can free the same usbtransfert twice. The USB event callback and user code share the hidifacet state without locking, so both can tear down a READY interface...
CVE-2025-68622
Espressif ESP-IDF USB Host UVC Class Driver allows video streaming from USB cameras. Prior to 2.4.0, a vulnerability in the esp-usb UVC host implementation allows a malicious USB Video Class UVC device to trigger a stack buffer overflow during configuration-descriptor parsing. When UVC...
PT-2026-2284
Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions prior to 1.1.0 Description The USB Host HID Human Interface Device Driver in ESP-IDF allows access to HID devices. A flaw exists in the usb class request get descriptor function where it frees and reallocates hid...
CVE-2018-18558
An issue was discovered in Espressif ESP-IDF 2.x and 3.x before 3.0.6 and 3.1.x before 3.1.1. Insufficient validation of input data in the 2nd stage bootloader allows a physically proximate attacker to bypass secure boot checks and execute arbitrary code, by crafting an application binary that...
CVE-2021-28139
The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet, allowing attackers in radio range to trigger arbitrary code execution in ESP32 via a crafted Extended Features bitfield...
Espressif ESP-IDF 代码问题漏洞
Espressif ESP-IDF is an Internet of Things IoT development framework from China Loxin Espressif. A code issue vulnerability exists in Espressif ESP-IDF that stems from improper handling of invalid access addresses, which could lead to advertisement stops and false connection reports...
EUVD-2020-8112
Malware in sbrugna...
EUVD-2020-5842
Malware in sbrugna...
EUVD-2021-14835
Malware in sbrugna...
EUVD-2018-10278
Malware in sbrugna...