Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-09-22 13:01:16 +03:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'docs/vulnerabilities_guide_new_advisories' into 'master'

Browse Source 
docs(security): update vulnerabilities guide with recently published advisories

See merge request espressif/esp-idf!51456
This commit is contained in:
Mahavir Jain
2026-08-05 18:27:43 +05:30
parent 9b35fd4405 6d613d01ac
commit 6498d81eb4
1 changed files with 33 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

44
docs/en/security/vulnerabilities.rst
View File

@@ -10,6 +10,16 @@ This page briefly lists all of the vulnerabilities that are discovered and fixed
CVE-2026
--------
CVE-2026-55687
~~~~~~~~~~~~~~
Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing
* Espressif Advisory: NA (Published on GitHub)
* Impact: Applicable for ESP-IDF (ESP32-P4 SoC only)
* Resolution: Please see advisory for details
* Advisory pointer: `GHSA-v6r2-f6p2-88cj`_
CVE-2026-46532
~~~~~~~~~~~~~~
@@ -60,6 +70,16 @@ Out-of-Bounds Write in ESP-TEE Secure Service Wrappers
* Resolution: Please see advisory for details
* Advisory pointer: `GHSA-mmgp-73p4-92xp`_
CVE-2026-45160
~~~~~~~~~~~~~~
Out-of-bounds Read in lwIP DHCP Server Option Parser
* Espressif Advisory: NA (Published on GitHub)
* Impact: Applicable for ESP-IDF
* Resolution: Please see advisory for details
* Advisory pointer: `GHSA-g764-gwc3-75m5`_
CVE-2026-25532
~~~~~~~~~~~~~~
@@ -74,6 +94,17 @@ WPS Enrollee Fragment Integer Underflow Vulnerability
CVE-2026-25508
~~~~~~~~~~~~~~
Out-of-Bounds Read Vulnerability in BLE Provisioning
* Espressif Advisory: NA (Published on GitHub)
* Impact: Applicable for ESP-IDF
* Resolution: Please see advisory for details
* Advisory pointer: `GHSA-9j5x-rf36-54x9`_
CVE-2026-25507
~~~~~~~~~~~~~~
Use-after-free Vulnerability in BLE Provisioning
* Espressif Advisory: NA (Published on GitHub)
@@ -82,17 +113,6 @@ Use-after-free Vulnerability in BLE Provisioning
* Advisory pointer: `GHSA-h7r3-gmg9-xjmg`_
CVE-2026-25507
~~~~~~~~~~~~~~
Out-of-bounds Read Vulnerability in BLE Provisioning
* Espressif Advisory: NA (Published on GitHub)
* Impact: Applicable for ESP-IDF
* Resolution: Please see advisory for details
* Advisory pointer: `GHSA-9j5x-rf36-54x9`_
CVE-2025
--------
@@ -375,3 +395,5 @@ Security Advisory Concerning Wi-Fi Authentication Bypass
.. _`GHSA-mmgp-73p4-92xp` : https://github.com/espressif/esp-idf/security/advisories/GHSA-mmgp-73p4-92xp
.. _`GHSA-w82j-7q63-7pqm` : https://github.com/espressif/esp-idf/security/advisories/GHSA-w82j-7q63-7pqm
.. _`GHSA-3pp8-42fh-3j3c` : https://github.com/espressif/esp-idf/security/advisories/GHSA-3pp8-42fh-3j3c
.. _`GHSA-g764-gwc3-75m5` : https://github.com/espressif/esp-idf/security/advisories/GHSA-g764-gwc3-75m5
.. _`GHSA-v6r2-f6p2-88cj` : https://github.com/espressif/esp-idf/security/advisories/GHSA-v6r2-f6p2-88cj