CVE-2026-51260

CVE-2026-51260CVE-2026-51260

Description

Unsafe fixed-size memcpy operation in AudioBuffer::writeSpace() of schreibfaul1 ESP32-audioI2S 3.4.5 allows remote heap buffer overflow. The code copies a full UINT16_MAX bytes without validating destination available space, causing out-of-bounds memory write.

Scoring

CVSS 9.4 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
Last modified2026-07-28
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.