CVE Tools
Track your stack

Esp-idf

37 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Esp-idf, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Esp-idf CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Esp-idf CVEs per month
MonthCVEs
2024-111
2024-121
2025-010
2025-020
2025-031
2025-040
2025-050
2025-061
2025-070
2025-081
2025-090
2025-100
2025-112
2025-123
2026-010
2026-023
2026-030
2026-040
2026-050
2026-066
2026-071
2026-080
2026-091
2026-101

Severity

How the 37 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical39%
  • High1441%
  • Medium1750%

Latest CVEs

The 15 most recently published vulnerabilities affecting Esp-idf.

  1. CVE-2026-81507ESF-IDF: Bluetooth Classic L2CAP Heap Memory Disclosure Allowing Unauthorized Access to Sensitive Data6.5
  2. CVE-2026-81508ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing4.3
  3. CVE-2026-55687ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing7.5
  4. CVE-2026-46532ESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parser4.6
  5. CVE-2026-45542ESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth7.1
  6. CVE-2026-45329ESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers7.1
  7. CVE-2026-45328ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers9.3
  8. CVE-2026-45160ESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parser6.5
  9. CVE-2026-45541ESF-IDF: Remote Null Pointer Dereference in WebSocket Server7.5
  10. CVE-2026-25508ESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning6.3
  11. CVE-2026-25507ESF-IDF Has Use-after-free Vulnerability in BLE Provisioning6.3
  12. CVE-2026-25532ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow6.3
  13. CVE-2025-68474ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling7.6
  14. CVE-2025-68473ESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handling8.6
  15. CVE-2025-66409ESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling9.1

Product grouping is registry-driven, with AI assist and human review. How it works