CVE-2026-45328CWE-20CWE-787

ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers

Critical · published June 10, 2026

CVSS v3.1
9.3
EPSS
0%
Percentile
7.3
In the wild
Unconfirmed
What it is

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, the esp_tee component exposes secure-service wrappers in esp_secure_services.c and esp_secure_services_iram.c that bridge calls from the user application (i.e. the REE) to TEE-protected hardware peripherals (AES, SHA, ECC, HMAC, SPI, MMU, WDT) and to the security feature like attestation, OTA updates, secure storage. This issue has been patched in versions 5.5.5 and 6.0.1.

The record
Technical detail
CVSS v3.1
9.3 · CRITICAL
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00181 · 7.3th percentile
Weaknesses
CWE-20 · Improper Input Validation; CWE-787 · Out-of-bounds Write
Published
2026-06-10T00:33Z
EPSS history
Timeline
  • 10 JUN 00:33Z
    ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers
    cvelistv5