PT-2026-66547 · Undefined · Undefined

CVE-2026-51272 · Publicado 2026-07-30 · Atualizado 2026-07-30

Mitre

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow vulnerability exists in the latinToUTF8() character encoding conversion function. The function calculates required buffer size by simply doubling input length and reallocates ps ptr heap buffer without strict boundary validation. Malicious oversized input can trigger insufficient buffer allocation and out-of-bounds write during Latin-1 to UTF-8 conversion, leading to code execution, information disclosure, denial of service or privilege escalation.

Exploit

Correção

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-122

Identificadores relacionados

CVE-2026-51272

Produtos afetados

Undefined

Referências · 3

• 🔥 https://gist.github.com/programmervuln/5d1388bb85dfaf2e7e2700c5a2bceef5 · Exploit
• https://github.com/schreibfaul1/ESP32-audioI2S/blob/master/src/Audio.cpp · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-51272 · Nota de Segurança