https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-46532.htmlhttps://patchthecve.com/cve/CVE-2026-46532.htmlThu, 23 Jul 2026 09:10:00 +0000MEDIUM 4.6: ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.3, and 6.0, an out-of-bounds read exists in the BlueDroid AVRCP vendor-command parser (avrc_pars_vendor_cmd() in components/bt/host/bluedroid/stack/avrc/avrc_pars_tg.c). This issue has been https://patchthecve.com/cve/CVE-2026-45542.htmlhttps://patchthecve.com/cve/CVE-2026-45542.htmlThu, 23 Jul 2026 09:10:00 +0000HIGH 7.1: ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0, a heap buffer overflow exists in the Security Scheme 2 (SRP6a) session-setup path of the protocomm component. The first-phase handler (handle_session_command0() in components/prohttps://patchthecve.com/cve/CVE-2026-45541.htmlhttps://patchthecve.com/cve/CVE-2026-45541.htmlThu, 23 Jul 2026 09:10:00 +0000HIGH 7.5: ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0, a NULL-pointer dereference exists in the WebSocket subprotocol-negotiation path of the esp_http_server component. While parsing the client-supplied Sec-WebSocket-Protocol requesthttps://patchthecve.com/cve/CVE-2026-45329.htmlhttps://patchthecve.com/cve/CVE-2026-45329.htmlThu, 23 Jul 2026 09:10:00 +0000HIGH 7.1: ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, several ESP-TEE secure-service wrappers in esp_secure_services.c and esp_secure_services_iram.c validated only some of the caller-supplied pointer arguments, leaving input pointer arguments unchecked.https://patchthecve.com/cve/CVE-2026-45328.htmlhttps://patchthecve.com/cve/CVE-2026-45328.htmlThu, 23 Jul 2026 09:10:00 +0000CRITICAL 9.3: ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, the esp_tee component exposes secure-service wrappers in esp_secure_services.c and esp_secure_services_iram.c that bridge calls from the user application (i.e. the REE) to TEE-protected hardware periphttps://patchthecve.com/cve/CVE-2026-45160.htmlhttps://patchthecve.com/cve/CVE-2026-45160.htmlThu, 23 Jul 2026 09:10:00 +0000MEDIUM 6.5: ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.7, 5.3.5, 5.4.4, 5.5.4, and 6.0.1, an out-of-bounds read flaw exists in the DHCP server option parser (parse_options() in components/lwip/apps/dhcpserver/dhcpserver.c) shipped with ESP-IDF's lwIP component. The