espressif has 4 CVEs on record between 2025 and 2026. 2 were published in the last 90 days. The median CVSS is 7.0 (high).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.0
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Worst active — by depth score
CVE-2025-68473High· 8.6ESF-IDF is the Espressif Internet of Things (IOT) Development Framework47CVE-2025-68474High· 7.6ESF-IDF is the Espressif Internet of Things (IOT) Development Framework42CVE-2026-81507Medium· 6.5ESF-IDF is the Espressif Internet of Things (IOT) Development Framework36CVE-2026-81508Medium· 4.3ESF-IDF is the Espressif Internet of Things (IOT) Development Framework24
espressif vulnerabilities
CVEs affecting espressif, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-81507Medium· 6.5ESF-IDF is the Espressif Internet of Things (IOT) Development Framework
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Prior to 5.2.8, 5.3.6, 5.5.5, 6.0.3, and 6.1-rc1, ESP-IDF BlueDroid L2CAP configuration-option processing in l2c_main.c and l2c_utils.c does not consistently valida…
CVE-2026-81508Medium· 4.3ESF-IDF is the Espressif Internet of Things (IOT) Development Framework
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btc_a2dp_sink_handle_inc_media() reads a timestamp field from the received media buffer before validating…
CVE-2025-68474High· 7.6ESF-IDF is the Espressif Internet of Things (IOT) Development Framework
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, in the avrc_vendor_msg() function of the ESP-IDF BlueDroid AVRCP stack, the allocated buffer size was va…
CVE-2025-68473High· 8.6ESF-IDF is the Espressif Internet of Things (IOT) Development Framework
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, in the ESP-IDF Bluetooth host stack (BlueDroid), the function bta_dm_sdp_result() used a fixed-size arra…