CVE-2025-55297CWE-120CWE-131
ESF-IDF BluFi Example Memory Overflow Vulnerability
Medium · published August 21, 2025
What it is
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. The BluFi example bundled in ESP-IDF was vulnerable to memory overflows in two areas: Wi-Fi credential handling and Diffie–Hellman key exchange. This vulnerability is fixed in 5.4.1, 5.3.3, 5.1.6, and 5.0.9.
The record
Technical detail
- CVSS v4.0
- 5.2 · MEDIUM
- Vector
- CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
- EPSS
- 0.00358 · 28.4th percentile
- Weaknesses
- CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'); CWE-131 · Incorrect Calculation of Buffer Size
- Published
- 2025-08-21T15:05Z
EPSS history
Timeline