CVE-2020-16146 | BDVDB-2026-147251 Detail

Description#

Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.7, 3.2.x through 3.2.3, 3.3.x through 3.3.2, and 4.0.x through 4.0.1 has a Buffer Overflow in BluFi provisioning in btc_blufi_recv_handler function in blufi_prf.c. An attacker can send a crafted BluFi protocol Write Attribute command to characteristic 0xFF01. With manipulated packet fields, there is a buffer overflow.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12021-01-12Record published in the CVE List.
2. Version 22024-08-04Most recent update recorded in the CVE List.