CVE detail
CVE-2026-45328
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, the esp_tee component exposes secure-service wrappers in esp_secure_services.c and esp_secure_services_iram.c that bridge calls from the user application (i.e. the REE) to TEE-protected hardware peripherals (AES, SHA, ECC, HMAC, SPI, MMU, WDT) and to the security feature like attestation, OTA updates, secure storage. This issue has been patched in versions 5.5.5 and 6.0.1.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 20.8 · diversity 5.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
7 source links · newest first
No excerpt available.
Exploitgithub.comJun 10, 2026, 2:16 AMNo excerpt available.
Exploitgithub.comJun 10, 2026, 2:16 AMNo excerpt available.
Exploitgithub.comJun 10, 2026, 2:16 AMNo excerpt available.
Exploitgithub.comJun 10, 2026, 2:16 AMNo excerpt available.
Exploitgithub.comJun 10, 2026, 2:16 AMNo excerpt available.
Exploitgithub.comJun 10, 2026, 2:16 AMNo excerpt available.
Exploitgithub.comJun 10, 2026, 2:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-50144CVSS 7.1 · High
ncnn is a high-performance neural network inference framework optimized for the mobile platform. In commit e54f7b1f88434e1d844ea0551b880a1cfb079ce1 and earlier, ncnn allows an out…
- CVE-2026-14087CVSS 8.8 · High
Heap buffer overflow in WebNN in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially exploit heap cor…
- CVE-2026-56340CVSS 8.7 · High
vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. Because PyTorch disables sparse tensor invariant checks by default,…
- CVE-2026-49840CVSS 9.1 · Critical
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardwa…
- CVE-2026-49475CVSS 7.5 · High
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardwa…
- CVE-2026-32177CVSS 7.3 · High
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.