CVE-2026-51263

This CVE concerns schreibfaul1 ESP32-audioI2S 3.4.5. The Audio::openai_speech function constructs JSON request bodies and HTTP headers by directly concatenating externally controllable input without proper length restriction or boundary validation, enabling a heap buffer overflow via string splic...