CVE-2026-51269

schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the connecttospeech function. The application accepts attacker-controlled long speech text input, performs URL encoding, and directly appends the encoded result into a fixed psptr heap buffer when constructing HTT...

CVE-2026-51269

schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the connecttospeech function. The application accepts attacker-controlled long speech text input, performs URL encoding, and directly appends the encoded result into a fixed psptr heap buffer when constructing HTT...

CVE-2026-51269

ESP32-audioI2S 3.4.5 (schreibfaul1) contains a heap-based buffer overflow in connecttospeech(), due to attacker-controlled long speech input being URL-encoded and directly appended into a fixed ps_ptr heap buffer when forming HTTP TTS headers. The issue stems from missing input length validation ...