CVE-2026-51270

CVE-2026-51270 concerns schreibfaul1's ESP32-audioI2S 3.4.5, which has a heap-based buffer overflow in the htmlToUTF8() HTML entity decoding function. The function decodes attacker-controlled HTML entities and uses memmove/memcpy to rearrange string content without validating remaining buffer siz...

EUVD-2026-49868

schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the htmlToUTF8 HTML entity decoding function. The function parses attacker-controlled malicious HTML entities and uses memmove and memcpy to rearrange string content without validating buffer remaining size and...