CVE-2024-42484

CVE-2024-42484 affects the ESP-NOW component, where the group-type message handling fails to validate the addrs_num field. This omission allows a crafted group message to be larger than the allocated buffer, causing memory corruption. The vulnerability is rooted in the mismatch between addrs_num ...

PT-2024-29981 · Espressif · Esp-Now

Name of the Vulnerable Software and Affected Versions: ESP-NOW Component affected versions not specified Description: The ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound OOB vulnerability was discovered in the implementation of the ESP-NOW group type...

PT-2024-29980 · Espressif · Esp-Now

Name of the Vulnerable Software and Affected Versions: ESP-NOW versions prior to 2.5.2 Description: A replay attacks vulnerability was discovered in the ESP-NOW Component, which provides a connectionless Wi-Fi communication protocol. The issue arises because the cache is not differentiated by...