CVE-2026-51252

schreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in the MP3Decoder::UnpackSFMPEG1 function due to missing input validation on attacker-controlled MP3 metadata...

CVE-2026-51266

schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the HTTP request header construction logic. The application dynamically splices attacker-controlled host name, path, query string, and multiple HTTP header fields into a fixed psptr heap buffer without proper size...

CVE-2026-51254

Concrete details found: ESP32-audioI2S v3.4.5 MP3 decoder MP3Decoder::GetBits() has an unchecked nBits read, causing an integer underflow of cachedBits. This can lead to invalid bitstream parsing, app crash, or arbitrary code execution via a crafted MP3 file.