241 matches found
CVE-2025-65092 ESP32-P4 JPEG Decoder Header Parsing Vulnerability
ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.1, 5.4.3, and 5.3.4, when the ESP32-P4 uses its hardware JPEG decoder, the software parser lacks necessary validation checks. A specially crafted malicious JPEG image could exploit the parsing routine and trigg...
CVE-2025-65092: Out-of-bounds Read
ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.1, 5.4.3, and 5.3.4, when the ESP32-P4 uses its hardware JPEG decoder, the software parser lacks necessary validation checks. A specially crafted malicious JPEG image could exploit the parsing routine and trigg...
Espressif ESP-IDF 代码问题漏洞
Espressif ESP-IDF is an Internet of Things IoT development framework from China Loxin Espressif. A code issue vulnerability exists in Espressif ESP-IDF that stems from improper handling of invalid access addresses, which could lead to advertisement stops and false connection reports...
CVE-2025-64342: Improper Check for Unusual or Exceptional Conditions
ESF-IDF is the Espressif Internet of Things IOT Development Framework. When the ESP32 is in advertising mode, if it receives a connection request containing an invalid Access Address AA of 0x00000000 or 0xFFFFFFFF, advertising may stop unexpectedly. In this case, the controller may incorrectly...
EUVD-2020-8112
Malware in sbrugna...
EUVD-2018-10278
Malware in sbrugna...
EUVD-2021-14835
Malware in sbrugna...
EUVD-2020-5842
Malware in sbrugna...
EUVD-2020-5841
Malware in sbrugna...
EUVD-2021-14838
Malware in sbrugna...
EUVD-2025-26385
Malicious code in bioql PyPI...
EUVD-2025-17140
Malicious code in bioql PyPI...
EUVD-2025-17121
Malicious code in bioql PyPI...
EUVD-2025-17126
Malicious code in bioql PyPI...
EUVD-2025-19059
Malicious code in bioql PyPI...
EUVD-2024-31192
Malicious code in bioql PyPI...
EUVD-2025-17128
Malicious code in bioql PyPI...
EUVD-2024-54052
Malicious code in bioql PyPI...
EUVD-2024-25308
Malicious code in bioql PyPI...
GHSA-MXH2-CCGJ-8635 ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header
Summary On the ESP-IDF platform, ESPHome's webserver authentication check can pass incorrectly when the client-supplied base64-encoded Authorization value is empty or is a substring of the correct value e.g., correct username with partial password. This allows access to webserver functionality...