Lucene search
+L

1 matches found

PyPA
PyPA
added 2026/07/07 4:03 p.m.24 views

ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component

SummaryAn integer overflow in the API component's protobuf decoder allows denial-of-service attacks when API encryption is not used. DetailsThe bounds check ptr + fieldlength end in components/api/proto.cpp can overflow when a malicious client sends a large fieldlength value. This affects all...

7.5CVSS6AI score0.00305EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder