# Vulnerabilities

This page briefly lists all of the vulnerabilities that are discovered and fixed in each release. Please note that for the on-going issues or the issues under embargo period, the information on this page may reflect once the desired resolution has been achieved.

备注

Please refer to `latest` version of this documentation guide for up-to-date information.

## CVE-2025

### CVE-2025-66409

Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling

- Espressif Advisory: NA (Published on GitHub)

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

- Advisory pointer: GHSA-qhf9-vr2h-jh96

### CVE-2025-65092

ESP32-P4 JPEG Decoder Header Parsing Vulnerability

- Espressif Advisory: NA (Published on GitHub)

- Impact: Applicable for ESP-IDF (ESP32-P4 SoC only)

- Resolution: Please see advisory for details

- Advisory pointer: GHSA-vcw6-jc3p-4gj8

### CVE-2025-64342

ESP32 Bluetooth Controller Invalid Access Address Vulnerability

- Espressif Advisory: NA (Published on GitHub)

- Impact: Applicable for ESP-IDF (ESP32 SoC only)

- Resolution: Please see advisory for details

- Advisory pointer: GHSA-8mg7-9qpg-p92v

### CVE-2025-55297

BluFi Example Memory Overflow Vulnerability

- Espressif Advisory: NA (Published on GitHub)

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

- Advisory pointer: GHSA-9w88-r2vm-qfc4

### CVE-2025-52471

ESP-NOW Integer Underflow Vulnerability Advisory

- Espressif Advisory: NA (Published on GitHub)

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

- Advisory pointer: GHSA-hqhh-cp47-fv5g

## CVE-2024

### CVE-2024-53845

AES/CBC Constant IV Vulnerability in ESPTouch v2

- Espressif Advisory: NA (Published on GitHub)

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

- Advisory pointer: GHSA-wm57-466g-mhrr

### CVE-2024-30949

RISC-V gettimeofday system call vulnerability in Newlib's

- Impact: ESP-IDF does not use system call implementations from Newlib

- Resolution: NA

### CVE-2024-28183

Bootloader TOCTOU Vulnerability in Anti-rollback Scheme

- Espressif Advisory: NA (Published on GitHub)

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

- Advisory pointer: GHSA-22x6-3756-pfp8

## CVE-2023

### CVE-2023-35818

Security Advisory Concerning Bypassing Secure Boot and Flash Encryption Using EMFI

- Espressif Advisory: AR2023-005

- Impact: Applicable for ESP32 Chip Revision v3.0/v3.1

- Resolution: Please see advisory for details

### CVE-2023-24023

Security Advisory Concerning the Bluetooth BLUFFS Vulnerability

- Espressif Advisory: AR2023-010

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

### CVE-2023-52160

Security Advisory for PEAP Phase-2 Authentication

- Espressif Advisory: AR2024-003

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

## CVE-2022

### CVE-2022-24893

Espressif Bluetooth Mesh Stack Vulnerability

- Espressif Advisory: NA (Published on GitHub)

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

- Advisory pointer: GHSA-7f7f-jj2q-28wm

## CVE-2021

### CVE-2021-32020

Insufficient bounds checking during management of heap memory in FreeRTOS

- Impact: ESP-IDF uses its own heap allocator and hence not applicable

- Resolution: NA

### CVE-2021-43997

Privilege escalation issue in FreeRTOS ARMv7-M and ARMv8-M MPU ports

- Impact: Not applicable for Espressif chips

- Resolution: NA

### CVE-2021-3420

Security Advisory on "BadAlloc" Vulnerabilities

- Espressif Advisory: AR2021-005

- Impact: Not applicable for ESP-IDF

- Resolution: NA

### CVE-2021-31571

Security Advisory on "BadAlloc" Vulnerabilities

- Espressif Advisory: AR2021-005

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

### CVE-2021-31572

Security Advisory on "BadAlloc" Vulnerabilities

- Espressif Advisory: AR2021-005

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

### CVE-2021-28139

Security Advisory for Bluetooth Vulnerability

- Covers additional CVEs: CVE-2020-10135, CVE-2020-13595, CVE-2020-26555, CVE-2020-26556, CVE-2020-26557, CVE-2020-26558, CVE-2020-26559, CVE-2020-26560, CVE-2021-28135, CVE-2021-28136

- Espressif Advisory: AR2021-004

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

## CVE-2020

### CVE-2020-22283

Buffer overflow vulnerability in lwIP stack

- Espressif Advisory: NA

- Impact: Applicable for ESP-IDF

- Resolution: Fix cherry-picked and available in ESP-IDF >= v4.4.1

### CVE-2020-22284

Buffer overflow vulnerability in lwIP stack

- Espressif Advisory: NA

- Impact: Applicable for ESP-IDF

- Resolution: Fix cherry-picked and available in ESP-IDF >= v4.4.1

### CVE-2020-26142

Security Advisory for WLAN FragAttacks

- Espressif Advisory: AR2023-008

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

### CVE-2020-12638

Security Advisory Concerning Wi-Fi Authentication Bypass

- Espressif Advisory: AR2020-002

- Impact: Applicable for ESP-IDF

- Resolution: Please see advisory for details

此文档对您有帮助吗？

- 反馈已收到，谢谢！
- 如果您有其他意见，欢迎填写乐鑫文档反馈表。

- 我们重视您的反馈。
- 您可以填写乐鑫文档反馈表告诉我们如何改进该文档。