CVE-2026-45542 Espressif — Exploit & Vulnerability Details HIGH

Parameter	Value
CVSS	7.1 (HIGH)
Type	CWE-122 (Heap-based Buffer Overflow)
Vendor	Espressif
Public PoC	No

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0, a heap buffer overflow exists in the Security Scheme 2 (SRP6a) session-setup path of the protocomm component. The first-phase handler (handle_session_command0() in components/protocomm/src/security/security2.c) trusts the length of a client-supplied protobuf field for the SRP6a username and copies it into a buffer whose size is derived from a narrower destination type.

The resulting truncation-versus-copy asymmetry corrupts the heap when an oversized value is supplied. This issue has been patched in versions 5.2.7, 5.3.6, 5.4.5, 5.5.5, and 6.0.1.

Attack Parameters

Attack Vector

Adjacent

Requires local network access

Attack Complexity

Low

Easy to exploit

Privileges Required

None

No privileges needed

User Interaction

None

No user interaction needed

Impact Assessment

Confidentiality

None

No data leak

Integrity

Low

Partial data modification

Availability

High

Complete denial of service

CVSS Vector v3.1

Weakness Type (CWE)

CWE-122 Heap-based Buffer Overflow

Vulnerable Products 5

Configuration	From (including)	Up to (excluding)
Espressif Esp-Idf cpe:2.3:a:espressif:esp-idf:5.2.6:::::::*	—	—
Espressif Esp-Idf cpe:2.3:a:espressif:esp-idf:5.3.5:::::::*	—	—
Espressif Esp-Idf cpe:2.3:a:espressif:esp-idf:5.4.4:::::::*	—	—
Espressif Esp-Idf cpe:2.3:a:espressif:esp-idf:5.5.4:::::::*	—	—
Espressif Esp-Idf cpe:2.3:a:espressif:esp-idf:6.0:::::::*	—	—