CVE-2026-51270

CVE-2026-51270 concerns schreibfaul1's ESP32-audioI2S 3.4.5, which has a heap-based buffer overflow in the htmlToUTF8() HTML entity decoding function. The function decodes attacker-controlled HTML entities and uses memmove/memcpy to rearrange string content without validating remaining buffer siz...