PT-2026-2285 · Espressif · Esp-Idf

Published 2026-01-12 · Updated 2026-01-12 · CVE-2025-68657

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions prior to 1.1.0

Description The USB Host HID (Human Interface Device) Driver in ESP-IDF allows access to HID devices. Prior to version 1.1.0, the hid host device close() function can free the same usb transfer t twice. The USB event callback and user code share the hid iface t state without locking, potentially leading to simultaneous teardown of a READY interface and corruption of heap metadata within the ESP USB host stack.

Recommendations Update to version 1.1.0 or later.

Exploit

Fix

Double Free

Improper Locking

Weakness Enumeration

CWE-415

CWE-667

Related Identifiers

CVE-2025-68657

GHSA-GP8R-QJFR-GQFV

Affected Products

Esp-Idf

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68657.json · Exploit
• https://github.com/espressif/esp-usb/security/advisories/GHSA-gp8r-qjfr-gqfv · Patch
• https://github.com/espressif/esp-usb/commit/cd28106e9f72ac2719682c06f94601f9f034390b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-68657 · Security Note
• https://osv.dev/vulnerability/CVE-2025-68657 · Vendor Advisory
• https://twitter.com/CVEnew/status/2010770438117306698 · Twitter Post
• https://components.espressif.com/components/espressif/usb_host_hid/versions/1.1.0/changelog · Note