CVE-2026-51266

CVE-2026-51266 affects schreibfaul1 ESP32-audioI2S 3.4.5. The vulnerability is a heap-based buffer overflow in the HTTP request header construction logic: attacker-controlled host, path, query, and multiple header fields are dynamically spliced into a fixed ps_ptr heap buffer without proper size ...