PT-2026-2280 · Espressif · Esp-Idf

Published 2026-01-12 · Updated 2026-01-12 · CVE-2025-68622

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions prior to 2.4.0

Description The ESP-IDF USB Host UVC Class Driver, used for video streaming from USB cameras, contains a flaw in the esp-usb UVC host implementation. A malicious USB Video Class (UVC) device can trigger a stack buffer overflow during configuration-descriptor parsing. When UVC configuration-descriptor printing is enabled, the host prints descriptor information from the USB device. A crafted UVC descriptor advertising a large length, which is not validated before being copied into a fixed-size stack buffer, can cause a buffer overflow and memory corruption.

Recommendations Update to version 2.4.0 or later.

Exploit

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2025-68622

GHSA-G65H-9GGQ-9827

Affected Products

Esp-Idf

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68622.json · Exploit
• https://github.com/espressif/esp-usb/security/advisories/GHSA-g65h-9ggq-9827 · Patch
• https://github.com/espressif/esp-usb/commit/77a38b15a17f6e3c7aeb620eb4aeaf61d5194cc0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-68622 · Security Note
• https://osv.dev/vulnerability/CVE-2025-68622 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2010768416173392015 · Twitter Post
• https://twitter.com/CVEnew/status/2010770441518948689 · Twitter Post
• https://components.espressif.com/components/espressif/usb_host_uvc/versions/2.4.0/changelog · Note