Known Vulnerabilities for Esp32-s3 by Espressif
Listed below are 1 of the newest known vulnerabilities associated with "Esp32-s3" by "Espressif".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-111623 json | Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows unauthenticated attackers... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-87961 json | ESP32-audioI2S versions 3.4.4 through 4.0.0 contain a heap-based out-of-bounds read vulnerability in the read_ID3_Header func... | Not Provided | 2026-09-10 | 2026-09-10 |
| CVE-2026-81507 json | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Prior to 5.2.8, 5.3.6, 5.5.5, 6.0.3, and 6.1-rc1, ES... | Not Provided | 2026-10-13 | 2026-10-14 |
| CVE-2026-54571 json | ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to 3.11.1... | Not Provided | 2026-09-17 | 2026-09-21 |
| CVE-2026-41429 json | Not Provided | 2026-04-24 | 2026-05-05 | |
| CVE-2026-19737 json | i2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the requested direction only for I2S_DIR_BOTH. The I2S_DIR_RX ... | Not Provided | 2026-10-11 | 2026-10-16 |