CVE-2026-51275

CVE-2026-51275 affects schreibfaul1 ESP32-audioI2S 3.4.5. The vulnerability is a heap-based buffer overflow in the audiolib ID3v2 APIC frame parser caused by missing length validation of the APIC frame size field, enabling an attacker to supply a crafted MP3 file that triggers an out-of-bounds wr...