ESP32-audioI2S vulnerabilities

1 known vulnerability in ESP32-audioI2S from Schreibfaul1. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  ESP32-audioI2S: Out-of-bounds Read

  CVE-2026-87961Sep 10, 2026Schreibfaul1

  ESP32-audioI2S versions 3.4.4 through 4.0.0 contain a heap-based out-of-bounds read vulnerability in the read_ID3_Header function due to a shadowed length parameter in ID3 synchronized-lyrics processing. Attackers can craft malicious MP3 files or HTTP audio st