CVE-2025-65092 ESP32-P4 JPEG Decoder Header Parsing Vulnerability

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.1, 5.4.3, and 5.3.4, when the ESP32-P4 uses its hardware JPEG decoder, the software parser lacks necessary validation checks. A specially crafted malicious JPEG image could exploit the parsing routine and trigg...

Espressif ESP-IDF 代码问题漏洞

Espressif ESP-IDF is an Internet of Things IoT development framework from China Loxin Espressif. A code issue vulnerability exists in Espressif ESP-IDF that stems from improper handling of invalid access addresses, which could lead to advertisement stops and false connection reports...

EUVD-2020-8112

Malware in sbrugna...

EUVD-2020-5842

Malware in sbrugna...

EUVD-2021-14835

Malware in sbrugna...

EUVD-2018-10278

Malware in sbrugna...

EUVD-2020-5841

Malware in sbrugna...

EUVD-2021-14838

Malware in sbrugna...

EUVD-2025-17121

Malicious code in bioql PyPI...

EUVD-2025-17140

Malicious code in bioql PyPI...

EUVD-2025-26385

Malicious code in bioql PyPI...

EUVD-2025-17126

Malicious code in bioql PyPI...

EUVD-2025-19059

Malicious code in bioql PyPI...

EUVD-2024-31192

Malicious code in bioql PyPI...

EUVD-2024-54052

Malicious code in bioql PyPI...

EUVD-2025-17128

Malicious code in bioql PyPI...

EUVD-2024-25308

Malicious code in bioql PyPI...

GHSA-MXH2-CCGJ-8635 ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header

Summary On the ESP-IDF platform, ESPHome's webserver authentication check can pass incorrectly when the client-supplied base64-encoded Authorization value is empty or is a substring of the correct value e.g., correct username with partial password. This allows access to webserver functionality...

CVE-2025-55297 ESF-IDF BluFi Example Memory Overflow Vulnerability

ESF-IDF is the Espressif Internet of Things IOT Development Framework. The BluFi example bundled in ESP-IDF was vulnerable to memory overflows in two areas: Wi-Fi credential handling and Diffie–Hellman key exchange. This vulnerability is fixed in 5.4.1, 5.3.3, 5.1.6, and 5.0.9...

CVE-2025-52471

ESF-IDF is the Espressif Internet of Things IOT Development Framework. An integer underflow vulnerability has been identified in the ESP-NOW protocol implementation within the ESP Wi-Fi component of versions 5.4.1, 5.3.3, 5.2.5, and 5.1.6 of the ESP-IDF framework. This issue stems from insufficie...