https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T11:50:24.491969+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-66409 CVE-2025-66409 — ESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling 2026-10-19T11:50:24.512270+00:00

Affected: espressif esp-idf

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, when AVRCP is enabled on ESP32, receiving a malformed VENDOR DEPENDENT command from a peer device can cause the Bluetooth stack to access memory before validating the command buffer length. This may lead to an out-of-bounds read, potentially exposing unintended memory content or causing unexpected behavior.