CVE-2026-51254
HIGHESP32-audioI2S 3.4.5 - Integer Underflow and Remote Code Execution via MP3 Bitstream Parsing in MP3Decoder::GetBits
Title source: llmDescription
schreibfaul1 ESP32-audioI2S v3.4.5 has an integer underflow vulnerability in the MP3Decoder::GetBits() function of the MP3 decoder due to unchecked bit reading operations. The lack of validation on the nBits parameter causes the cachedBits counter to underflow to negative values, leading to invalid bit manipulation, incorrect bitstream parsing, application crash, or arbitrary code execution via a specially crafted MP3 file.
Scores
CVSS v3
7.8
EPSS
0.0013
EPSS Percentile
2.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
total
Details
CWE
CWE-191
Status
published
Published
Jul 28, 2026
Tracked Since
Jul 28, 2026