Warning

This document is not updated for ESP32H21 yet, so some of the content may not be correct.

This warning was automatically inserted due to the source file being in the add_warnings_pages list.

# Vulnerabilities

This page briefly lists all of the vulnerabilities that are discovered and fixed in each release. Please note that for the on-going issues or the issues under embargo period, the information on this page may reflect once the desired resolution has been achieved.

Note

Please refer to `latest` version of this documentation guide for up-to-date information.

## CVE-2026

### CVE-2026-25532

WPS Enrollee Fragment Integer Underflow Vulnerability

- Espressif Advisory: NA (Published on GitHub)

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

- Advisory pointer: GHSA-m2h2-683f-9mw7

## CVE-2025

### CVE-2025-55297

BluFi Example Memory Overflow Vulnerability

- Espressif Advisory: NA (Published on GitHub)

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

- Advisory pointer: GHSA-9w88-r2vm-qfc4

### CVE-2025-52471

ESP-NOW Integer Underflow Vulnerability Advisory

- Espressif Advisory: NA (Published on GitHub)

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

- Advisory pointer: GHSA-hqhh-cp47-fv5g

## CVE-2024

### CVE-2024-53845

AES/CBC Constant IV Vulnerability in ESPTouch v2

- Espressif Advisory: NA (Published on GitHub)

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

- Advisory pointer: GHSA-wm57-466g-mhrr

### CVE-2024-30949

RISC-V gettimeofday system call vulnerability in Newlib's

- Impact: ESP-IDF does not use system call implementations from Newlib

- Resolution: NA

### CVE-2024-28183

Bootloader TOCTOU Vulnerability in Anti-rollback Scheme

- Espressif Advisory: NA (Published on GitHub)

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

- Advisory pointer: GHSA-22x6-3756-pfp8

## CVE-2023

### CVE-2023-35818

Security Advisory Concerning Bypassing Secure Boot and Flash Encryption Using EMFI

- Espressif Advisory: AR2023-005

- Impact: Applicable for ESP32 Chip Revision v3.0/v3.1

- Resolution: Please see advisory for details

### CVE-2023-24023

Security Advisory Concerning the Bluetooth BLUFFS Vulnerability

- Espressif Advisory: AR2023-010

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

### CVE-2023-52160

Security Advisory for PEAP Phase-2 Authentication

- Espressif Advisory: AR2024-003

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

## CVE-2022

### CVE-2022-24893

Espressif Bluetooth Mesh Stack Vulnerability

- Espressif Advisory: NA (Published on GitHub)

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

- Advisory pointer: GHSA-7f7f-jj2q-28wm

## CVE-2021

### CVE-2021-32020

Insufficient bounds checking during management of heap memory in FreeRTOS

- Impact: ESP-IDF uses its own heap allocator and hence not applicable

- Resolution: NA

### CVE-2021-43997

Privilege escalation issue in FreeRTOS ARMv7-M and ARMv8-M MPU ports

- Impact: Not applicable for Espressif chips

- Resolution: NA

### CVE-2021-3420

Security Advisory on "BadAlloc" Vulnerabilities

- Espressif Advisory: AR2021-005

- Impact: Not applicable for ESP-IDF

- Resolution: NA

### CVE-2021-31571

Security Advisory on "BadAlloc" Vulnerabilities

- Espressif Advisory: AR2021-005

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

### CVE-2021-31572

Security Advisory on "BadAlloc" Vulnerabilities

- Espressif Advisory: AR2021-005

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

### CVE-2021-28139

Security Advisory for Bluetooth Vulnerability

- Covers additional CVEs: CVE-2020-10135, CVE-2020-13595, CVE-2020-26555, CVE-2020-26556, CVE-2020-26557, CVE-2020-26558, CVE-2020-26559, CVE-2020-26560, CVE-2021-28135, CVE-2021-28136

- Espressif Advisory: AR2021-004

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

## CVE-2020

### CVE-2020-22283

Buffer overflow vulnerability in lwIP stack

- Espressif Advisory: NA

- Impact: Applicable for ESP-IDF

- Resolution: Fix cherry-picked and available in ESP-IDF >= v4.4.1

### CVE-2020-22284

Buffer overflow vulnerability in lwIP stack

- Espressif Advisory: NA

- Impact: Applicable for ESP-IDF

- Resolution: Fix cherry-picked and available in ESP-IDF >= v4.4.1

### CVE-2020-26142

Security Advisory for WLAN FragAttacks

- Espressif Advisory: AR2023-008

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

### CVE-2020-12638

Security Advisory Concerning Wi-Fi Authentication Bypass

- Espressif Advisory: AR2020-002

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

Was this page helpful?

- Thank you! We received your feedback.
- If you have any comments, fill in Espressif Documentation Feedback Form.

- We value your feedback.
- Let us know how we can improve this page by filling in Espressif Documentation Feedback Form.