> CVE-2026-51263

« BACK_TO_HOME
PUBLISHED
2026-07-28 16:18
MODIFIED
2026-07-28 16:23
EPSS (Prob. Exploit)
0.43%
Top 64.3%
DATA SOURCES:
NVD 🔗 2026-07-28 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

schreibfaul1 ESP32-audioI2S 3.4.5 is vulnerable to Buffer Overflow. The Audio::openai_speech function in the Audio library manually constructs JSON request bodies and HTTP request headers by directly concatenating externally controllable input and instructions strings without effective length restriction and boundary validation. An unauthenticated remote attacker can send oversized malicious string data to trigger a heap buffer overflow during string splicing, resulting in memory corruption.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> HISTORIQUE DES MODIFICATIONS

Première apparition
28/07/2026 16:18
Source: NVD
Total des modifications: 0 Dernière mise à jour: 3 months ago

> REFERENCES

https://github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51263
https://github.com/schreibfaul1/ESP32-audioI2S/blob/master/src/Audio.cpp
« BACK_TO_HOME