Buffer overflow in Espressif Esp-idf
CVE-2026-55687
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Versions 6.0.1, 5.5.4, 5.4.4, 5.3.5, and possibly prior contain an out-of-bounds write in jpeg_parse_dqt_marker() in components/esp_driver_jpeg/jpeg_parse_marker.c be…
Vulnerability class: Buffer Overflow
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Espressif Esp-idf — versions >= 6.0.0, < 6.0.2, >= 5.5.0, <= 5.5.4, >= 5.4.0, <= 5.4.4
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2026-55687?
- CVE-2026-55687 is a high-severity vulnerability in Espressif Esp-idf, classified under Stack-based Buffer Overflow. CVSS score: 7.5/10. Published 2026-07-10.
- How severe is CVE-2026-55687?
- High severity. CVSS v3 base score is 7.5 out of 10.