diff --git a/docs/en/security/vulnerabilities.rst b/docs/en/security/vulnerabilities.rst index eb9e74e27af..c21996f8131 100644 --- a/docs/en/security/vulnerabilities.rst +++ b/docs/en/security/vulnerabilities.rst @@ -10,6 +10,16 @@ This page briefly lists all of the vulnerabilities that are discovered and fixed CVE-2026 -------- +CVE-2026-55687 +~~~~~~~~~~~~~~ + +Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing + +* Espressif Advisory: NA (Published on GitHub) +* Impact: Applicable for ESP-IDF (ESP32-P4 SoC only) +* Resolution: Please see advisory for details +* Advisory pointer: `GHSA-v6r2-f6p2-88cj`_ + CVE-2026-46532 ~~~~~~~~~~~~~~ @@ -60,6 +70,16 @@ Out-of-Bounds Write in ESP-TEE Secure Service Wrappers * Resolution: Please see advisory for details * Advisory pointer: `GHSA-mmgp-73p4-92xp`_ +CVE-2026-45160 +~~~~~~~~~~~~~~ + +Out-of-bounds Read in lwIP DHCP Server Option Parser + +* Espressif Advisory: NA (Published on GitHub) +* Impact: Applicable for ESP-IDF +* Resolution: Please see advisory for details +* Advisory pointer: `GHSA-g764-gwc3-75m5`_ + CVE-2026-25532 ~~~~~~~~~~~~~~ @@ -74,6 +94,17 @@ WPS Enrollee Fragment Integer Underflow Vulnerability CVE-2026-25508 ~~~~~~~~~~~~~~ +Out-of-Bounds Read Vulnerability in BLE Provisioning + +* Espressif Advisory: NA (Published on GitHub) +* Impact: Applicable for ESP-IDF +* Resolution: Please see advisory for details +* Advisory pointer: `GHSA-9j5x-rf36-54x9`_ + + +CVE-2026-25507 +~~~~~~~~~~~~~~ + Use-after-free Vulnerability in BLE Provisioning * Espressif Advisory: NA (Published on GitHub) @@ -82,17 +113,6 @@ Use-after-free Vulnerability in BLE Provisioning * Advisory pointer: `GHSA-h7r3-gmg9-xjmg`_ -CVE-2026-25507 -~~~~~~~~~~~~~~ - -Out-of-bounds Read Vulnerability in BLE Provisioning - -* Espressif Advisory: NA (Published on GitHub) -* Impact: Applicable for ESP-IDF -* Resolution: Please see advisory for details -* Advisory pointer: `GHSA-9j5x-rf36-54x9`_ - - CVE-2025 -------- @@ -375,3 +395,5 @@ Security Advisory Concerning Wi-Fi Authentication Bypass .. _`GHSA-mmgp-73p4-92xp` : https://github.com/espressif/esp-idf/security/advisories/GHSA-mmgp-73p4-92xp .. _`GHSA-w82j-7q63-7pqm` : https://github.com/espressif/esp-idf/security/advisories/GHSA-w82j-7q63-7pqm .. _`GHSA-3pp8-42fh-3j3c` : https://github.com/espressif/esp-idf/security/advisories/GHSA-3pp8-42fh-3j3c +.. _`GHSA-g764-gwc3-75m5` : https://github.com/espressif/esp-idf/security/advisories/GHSA-g764-gwc3-75m5 +.. _`GHSA-v6r2-f6p2-88cj` : https://github.com/espressif/esp-idf/security/advisories/GHSA-v6r2-f6p2-88cj