Espressif Esp32 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Espressif Esp32 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-34173 — CVSS 7.5 (high): An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa…
• CVE-2025-27840 — CVSS 6.8 (medium): Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).