| Package | Affected versions | Patched versions |
|---|---|---|
| esp-idf | ≤ 4.4 |
The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service (crash) in ESP32 by flooding the target device with LMP Feature Response data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free