CVE-2025-64342

ESF-IDF is the Espressif Internet of Things IOT Development Framework. When the ESP32 is in advertising mode, if it receives a connection request containing an invalid Access Address AA of 0x00000000 or 0xFFFFFFFF, advertising may stop unexpectedly. In this case, the controller may incorrectly...

CVE-2025-64342

ESF-IDF is the Espressif Internet of Things IOT Development Framework. When the ESP32 is in advertising mode, if it receives a connection request containing an invalid Access Address AA of 0x00000000 or 0xFFFFFFFF, advertising may stop unexpectedly. In this case, the controller may incorrectly...

CVE-2025-64342 ESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability

ESF-IDF is the Espressif Internet of Things IOT Development Framework. When the ESP32 is in advertising mode, if it receives a connection request containing an invalid Access Address AA of 0x00000000 or 0xFFFFFFFF, advertising may stop unexpectedly. In this case, the controller may incorrectly...

EUVD-2021-14838

Malware in sbrugna...

EUVD-2021-20835

Malware in sbrugna...

EUVD-2019-7795

Malware in sbrugna...

EUVD-2020-3404

Malware in sbrugna...

EUVD-2019-6805

Malware in sbrugna...

EUVD-2023-39813

Malicious code in bioql PyPI...

EUVD-2025-19198

Malicious code in bioql PyPI...

EUVD-2025-28668

Malicious code in bioql PyPI...

EUVD-2024-0877

Malicious code in bioql PyPI...

EUVD-2024-41606

Malicious code in bioql PyPI...

EUVD-2025-20306

Malicious code in bioql PyPI...

EUVD-2025-7816

Malicious code in bioql PyPI...

EUVD-2023-58494

Malicious code in bioql PyPI...

USBCoercer: A TinyUSB Based WPAD Coercion Device

USBCoercer turns an ESP32 development board with native USB-OTG into an Ethernet-over-USB gadget capable of coercing proxy configuration via WPAD. It builds on the TinyUSB Network Control Model NCM example and adds a minimalist DHCP server that injects DHCP option 252 WPAD/PAC and, additionally,...

CVE-2025-57808

A vulnerability has been identified in ESPHome’s webserver component on the ESP-IDF platform where the HTTP basic authentication check AsyncWebServerRequest::authenticate can be bypassed. Due to incorrect comparison of the base64-encoded Authorization header value, authentication succeeds if the...

The vulnerability of the AES-XTS encryption algorithm implementation in single-Chip Microcontrollers ESP32-S2 and ESP32-S2F allows a attacker to compromise the confidentiality of the protected information.

The vulnerability of the AES-XTS encryption algorithm implemented in single-Chip Microcontrollers ESP32-S2 and ESP32-S2F is related to the number of surfaces that are vulnerable, with their quantitative measurement exceeding the desired maximum. Exploiting this vulnerability can allow attackers t...

CVE-2025-53540

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Several OTA update examples and the HTTPUpdateServer implementation are vulnerable to Cross-Site Request Forgery CSRF. The update endpoints accept POST requests for firmware uploa...