| Package | Affected versions | Patched versions |
|---|---|---|
| esp-idf | ≥ 5.1, < 5.1.6≥ 5.2, < 5.3.3≥ 5.4, < 5.4.1< 5.0.9 | 5.1.65.3.35.4.15.0.9 |
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. The BluFi example bundled in ESP-IDF was vulnerable to memory overflows in two areas: Wi-Fi credential handling and Diffie–Hellman key exchange. This vulnerability is fixed in 5.4.1, 5.3.3, 5.1.6, and 5.0.9.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free