PT-2025-53610 · Espressif · Esp-Idf

Jincheng · Published 2025-12-26 · Updated 2025-12-27 · CVE-2025-68473

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions ESF-IDF versions 5.5.1 through 5.1.6 and earlier

Description ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. The Bluetooth host stack (BlueDroid) within ESP-IDF contains a flaw in the bta dm sdp result() function. This function utilizes a fixed-size array, uuid list[32][MAX UUID SIZE], to store discovered service UUIDs during the Service Discovery Protocol (SDP) process. If the number of discovered Bluetooth services exceeds 32, subsequent writes to this array can result in an out-of-bounds write condition.

Recommendations Versions prior to 5.1.6 are affected. Versions 5.1.6, 5.2.6, 5.3.4, 5.4.3, and 5.5.1 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-68473

GHSA-HMJJ-RJVV-W8PQ

Affected Products

Esp-Idf

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68473.json · Exploit
• https://github.com/espressif/esp-idf/commit/ecb86d353640cf1375bf97db32e702ba59c551b6 · Patch
• https://github.com/espressif/esp-idf/commit/9889edd799cf369e082df9d01adba961d64693ed · Patch
• https://github.com/espressif/esp-idf/commit/5b3185168dae83d42aa0852689422fffd931f16c · Patch
• https://github.com/espressif/esp-idf/commit/6ca6f422dafaffcb88fa56cc458ce92d96be3b2e · Patch
• https://github.com/espressif/esp-idf/security/advisories/GHSA-hmjj-rjvv-w8pq · Vendor Advisory
• https://github.com/espressif/esp-idf/commit/3286e45349b0b5c2b1422ef7e8d088b95eef895d · Patch
• https://github.com/espressif/esp-idf/commit/4d928f2265c394d2abc85024228e920a5b26bcab · Patch
• https://github.com/espressif/esp-idf/commit/6453f57a954458ad8ffd6e4bf2d9e76b73fac0f1 · Patch
• https://osv.dev/vulnerability/CVE-2025-68473 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68473 · Security Note
• https://t.me/CVEtracker/40734 · Telegram Post
• https://t.me/cveNotify/146925 · Telegram Post
• https://twitter.com/CVEnew/status/2004868108482453912 · Twitter Post