CVE-2026-51251
HIGHESP32-audioI2S 3.4.5 - Buffer Overflow in MP3Decoder::decode via Untrusted mainDataBegin and nSlots Values
Title source: llmDescription
Schreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in the MP3Decoder::decode() function of the MP3 decoder due to missing size validation on untrusted mainDataBegin and nSlots values.
Scores
CVSS v3
7.5
EPSS
0.0031
EPSS Percentile
23.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-119
Status
published
Published
Jul 28, 2026
Tracked Since
Jul 28, 2026