PT-2019-9603

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions 2.x through 3.0.5 Espressif ESP-IDF versions 3.1.x through 3.1.0 Description The issue is related to insufficient validation of input data in the 2nd stage bootloader, allowing a physically proximate attacker to bypa...

CVE-2018-18558: Improper Input Validation

An issue was discovered in Espressif ESP-IDF 2.x and 3.x before 3.0.6 and 3.1.x before 3.1.1. Insufficient validation of input data in the 2nd stage bootloader allows a physically proximate attacker to bypass secure boot checks and execute arbitrary code, by crafting an application binary that...