dcsgonefirm

dcsgonefirm Notes As this repo is still being worked on, some things in this Readme are marked with 'Dev:'. Feel free to change this if needed. Building this You need ESP-IDF, any modern version should work. Dev: Change this if you require a more specific version Command-line: idf.py set-target...

EUVD-2026-117493

ESP-Protocols is a collection of protocol components for ESP-IDF. Prior to mDNS version 1.11.2, the mdns component follows DNS name-compression pointers recursively when parsing fully qualified domain names FQDNs in inbound mDNS packets without capping pointer-follow depth in mdnsutilsreadfqdn. A...

CVE-2026-64860

The mdns component in ESP-Protocols (prior to version 1.11.2) is vulnerable to uncontrolled recursion when parsing fully qualified domain names (FQDNs) in inbound mDNS packets. Specifically, the mdns_utils_read_fqdn() function fails to cap pointer-follow depth during DNS name-compression, allowin...

AI-driven-MITRE-Attack

POC : AI-driven MITRE Attack Detection and Alert Enrichment This repository demonstrates a machine learning pipeline for detecting MITRE ATT&CK techniques from logs and enriching the output using a local LLM. Overview The project is divided into two main components : 1. Machine Learning Model ML ...

CVE-2026-113782

ESP-IDF is the Espressif Internet of Things IOT Development Framework. From 5.2.0 until 5.2.8, 5.3.6, 5.4.5, 5.5.5, and 6.0.3, the OpenThread Border Router Neighbor Discovery packet handler trusts an attacker-controlled ICMPv6 option length while copying into a fixed stack buffer. A host on the...

CVE-2026-113780

ESF-IDF is the Espressif Internet of Things IOT Development Framework. From 5.5.5 until 5.5.6, 6.0.4, and 6.1.1, the esptee trap entry in espteevectorsplic.S and espteevectorsclic.S saves a caller-controlled register frame through the REE-supplied stack pointer before switching to the trusted TEE...

CVE-2026-113783

ESP-IDF is the Espressif Internet of Things IOT Development Framework. From 5.2.3 until 5.3.7, 5.4.5, 5.5.6, and 6.0.3, the lwIP DNS resolver's cached-lookup path in dnslookup in dns.c copies every cached address into a caller-provided single ipaddrt output buffer without a length parameter or...

CVE-2026-113780 ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary

ESF-IDF is the Espressif Internet of Things IOT Development Framework. From 5.5.5 until 5.5.6, 6.0.4, and 6.1.1, the esptee trap entry in espteevectorsplic.S and espteevectorsclic.S saves a caller-controlled register frame through the REE-supplied stack pointer before switching to the trusted TEE...

CVE-2026-113780

The ESF-IDF (Espressif IoT Development Framework) contains a vulnerability in the esp_tee trap entry within esp_tee_vectors_plic.S and esp_tee_vectors_clic.S. The root cause is that the system saves a caller-controlled register frame using a REE-supplied stack pointer before switching to the trus...

CVE-2026-113780 ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary

ESF-IDF is the Espressif Internet of Things IOT Development Framework. From 5.5.5 until 5.5.6, 6.0.4, and 6.1.1, the esptee trap entry in espteevectorsplic.S and espteevectorsclic.S saves a caller-controlled register frame through the REE-supplied stack pointer before switching to the trusted TEE...

CVE-2026-113783 ESP-IDF: Stack-based memory corruption in lwIP DNS/SNTP handling for multi-IP DNS responses

ESP-IDF is the Espressif Internet of Things IOT Development Framework. From 5.2.3 until 5.3.7, 5.4.5, 5.5.6, and 6.0.3, the lwIP DNS resolver's cached-lookup path in dnslookup in dns.c copies every cached address into a caller-provided single ipaddrt output buffer without a length parameter or...

CVE-2026-113783

The ESP-IDF (Espressif Internet of Things Development Framework) contains a stack-based buffer overflow in the lwIP DNS resolver 's cached-lookup path within dns_lookup() in dns.c. When CONFIG_LWIP_DNS_MAX_HOST_IP is greater than 1 and a cached hostname contains multiple A or AAAA records, the sy...

CVE-2026-113782 ESP-IDF: Stack-Based Out-of-Bounds Write in Thread Border Router ND6 Option Parsing

ESP-IDF is the Espressif Internet of Things IOT Development Framework. From 5.2.0 until 5.2.8, 5.3.6, 5.4.5, 5.5.5, and 6.0.3, the OpenThread Border Router Neighbor Discovery packet handler trusts an attacker-controlled ICMPv6 option length while copying into a fixed stack buffer. A host on the...

CVE-2026-113782

The ESP-IDF (Espressif Internet of Things Development Framework) contains a stack-based buffer overflow (CWE-121) in the OpenThread Border Router Neighbor Discovery packet handler. Specifically, the handler trusts an attacker-controlled ICMPv6 option length while copying data into a fixed stack b...

PT-2026-137100

Name of the Vulnerable Software and Affected Versions ESP-IDF versions 5.5.5 through 5.5.5 ESP-IDF version 6.0.4 ESP-IDF version 6.1.1 Description In the ESP-TEE trap entry within esp tee vectors plic.S and esp tee vectors clic.S, the system saves a caller-controlled register frame using a stack...

PT-2026-137101

ESP-IDF is the Espressif Internet of Things IOT Development Framework. From 5.2.3 until 5.3.7, 5.4.5, 5.5.6, and 6.0.3, the lwIP DNS resolver's cached-lookup path in dns lookup in dns.c copies every cached address into a caller-provided single ip addr t output buffer without a length parameter or...

PT-2026-137095

ESP-IDF is the Espressif Internet of Things IOT Development Framework. From 5.2.0 until 5.2.8, 5.3.6, 5.4.5, 5.5.5, and 6.0.3, the OpenThread Border Router Neighbor Discovery packet handler trusts an attacker-controlled ICMPv6 option length while copying into a fixed stack buffer. A host on the...

esp32-cve-2025-27840-power-trace-experiment

esp32-cve-2025-27840-power-trace-experiment Firmware for getting a power trace of the behavior of the bluetooth module on the ESP32 when the ESP32 is sent the undocumented hci bluetooth commands CVE-2025-27840. When the ESP32 receives the commands, it toggles a GPIO pin to trigger the power trace...

esp32_esp8266_attacks

ESP32/ESP8266 Wi-Fi Attacks This repository is part of a research outcome from theASSET Research Group. This repository demonstrates 3 Wi-Fi attacks against the popular ESP32/8266 IoT devices: Zero PMK Installation CVE-2019-12587 - Hijacking ESP32/ESP8266 clients connected to enterprise networks;...

CVE-2024-33453

CVE-2024-33453 Sensitive Data Exposure via Object Level Access Control in esp-idf Description A Buffer Overflow vulnerability in the esp-idf framework version 5.1, used by some Schoolbox products, allows a remote attacker to obtain sensitive information through improper object-level access contro...