← Volver al buscador de CVEs

CVE-2026-46532

ESF-IDF

Descripción

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.3, and 6.0, an out-of-bounds read exists in the BlueDroid AVRCP vendor-command parser (avrc_pars_vendor_cmd() in components/bt/host/bluedroid/stack/avrc/avrc_pars_tg.c). This issue has been patched in versions 5.2.7, 5.3.6, 5.4.5, 5.5.4, and 6.0.1.

CVSS 4.6EPSS 0.22799999999999998%Riesgo 0.47
Ver fuente
Publicación
2026-06-10 02:16:33
Versiones afectadas
<5.2.7, <5.3.6, <5.4.5, <5.5.4, <6.0.1
Tipo
Firmware
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L