Lucene search
K

8 matches found

NVD
NVD
added 2025/12/27 12:15 a.m.2 views

CVE-2025-68474

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, in the avrcvendormsg function of the ESP-IDF BlueDroid AVRCP stack, the allocated buffer size was validated using AVRCMINCMDLEN 20 bytes. However, the actual fixed...

7.6CVSS0.00007EPSS
Exploits0References7
OSV
OSV
added 2025/12/26 11:57 p.m.2 views

CVE-2025-68474 ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, in the avrcvendormsg function of the ESP-IDF BlueDroid AVRCP stack, the allocated buffer size was validated using AVRCMINCMDLEN 20 bytes. However, the actual fixed...

6.1CVSS7.5AI score0.00007EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2025/12/26 12:0 a.m.2 views

PT-2025-53611

Name of the Vulnerable Software and Affected Versions ESF-IDF versions 5.5.1 through 5.1.6 Description ESF-IDF, the Espressif Internet of Things IOT Development Framework, contains a flaw in the avrc vendor msg function within the BlueDroid AVRCP stack. The function validates the allocated buffer...

6.1CVSS7.2AI score0.00007EPSS
Exploits0References11
RedhatCVE
RedhatCVE
added 2025/09/06 7:31 p.m.1 views

CVE-2024-49714

In avrcvendormsg of avrcopt.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.6AI score0.0001EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/04 6:33 p.m.2 views

CVE-2024-49714

In avrcvendormsg of avrcopt.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7AI score0.0001EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/09/04 6:33 p.m.3 views

CVE-2024-49714

In avrcvendormsg of avrcopt.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.0001EPSS
Exploits0References2
CVE
CVE
added 2025/09/04 6:33 p.m.18 views

CVE-2024-49714

CVE-2024-49714 is an elevation-of-privilege vulnerability in the AVRCP vendor message path: in avrc_vendor_msg within avrc_opt.cc, a heap-buffer overflow can cause an out-of-bounds write. This enables local escalation on a paired device without extra privileges or user interaction. Exploitation i...

7.8CVSS7AI score0.0001EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/09/04 6:33 p.m.1 views

CVE-2024-49714

In avrcvendormsg of avrcopt.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.2AI score0.0001EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder