CVE-2026-113780

The ESF-IDF (Espressif IoT Development Framework) contains a vulnerability in the esp_tee trap entry within esp_tee_vectors_plic.S and esp_tee_vectors_clic.S. The root cause is that the system saves a caller-controlled register frame using a REE-supplied stack pointer before switching to the trus...

CVE-2026-45328

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.4 and 6.0, the esptee component exposes secure-service wrappers in espsecureservices.c and espsecureservicesiram.c that bridge calls from the user application i.e. the REE to TEE-protected hardware peripherals...

CVE-2026-45328: Improper Input Validation

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.4 and 6.0, the esptee component exposes secure-service wrappers in espsecureservices.c and espsecureservicesiram.c that bridge calls from the user application i.e. the REE to TEE-protected hardware peripherals...