272 matches found
CVE-2026-51263
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51268
Summary of concrete details found : CVE-2026-51268 is connected to a heap-based buffer overflow in ESP32-audioI2S 3.4.5, affecting the host parsing logic. The dismantle_host()/host() parsing of untrusted host and URL input leads to copying parsed segments (host, request_host, extension, query_str...
CVE-2026-51251
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51263
...
EUVD-2026-49927
In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow in the ID3v2 SYLT synchronized lyrics parser in audiolib allows remote attackers to cause a denial of service application crash, information disclosure, or potential arbitrary code execution via a crafted MP3 file. The vulnerabili...
PT-2026-65508
schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the URL path concatenation and encoding module. The application splices untrusted extension path and attacker-controlled query string into a path buffer, then invokes urlencode without validating the final string...
CVE-2026-51275
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51266
CVE-2026-51266 is rejected/not used and does not represent an active vulnerability entry.
CVE-2026-51268
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
PT-2026-65506
schreibfaul1 ESP32-audioI2S 3.4.5 is vulnerable to Buffer Overflow. The Audio::openai speech function in the Audio library manually constructs JSON request bodies and HTTP request headers by directly concatenating externally controllable input and instructions strings without effective length...
CVE-2026-51267
...
CVE-2026-51261
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51266
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51268
...
CVE-2026-51254
CVE-2026-51254 is rejected/not used; this record does not represent an active vulnerability.
CVE-2026-51270
The CVE-2026-51270 records a heap-based buffer overflow in the ESP32- AudioI2S 3.4.5 component’s htmlToUTF8() HTML entity decoding function. An attacker-controlled HTML entity can trigger a heap out-of-bounds write via memmove/memcpy without validating remaining buffer size, potentially enabling ...