PT-2026-65506 · Undefined · Undefined

CVE-2026-51263 · Publicado 2026-07-28 · Atualizado 2026-07-28

Mitre

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

schreibfaul1 ESP32-audioI2S 3.4.5 is vulnerable to Buffer Overflow. The Audio::openai speech function in the Audio library manually constructs JSON request bodies and HTTP request headers by directly concatenating externally controllable input and instructions strings without effective length restriction and boundary validation. An unauthenticated remote attacker can send oversized malicious string data to trigger a heap buffer overflow during string splicing, resulting in memory corruption.

Exploit

Correção

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-122

Identificadores relacionados

CVE-2026-51263

Produtos afetados

Undefined

Referências · 3

• 🔥 https://github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51263 · Exploit
• https://github.com/schreibfaul1/ESP32-audioI2S/blob/master/src/Audio.cpp · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-51263 · Nota de Segurança