CVE-2026-51275
Received Received - Intake

Heap-based Buffer Overflow in schreibfaul1 ESP32-audioI2S

Publication date: 2026-07-28

Last updated on: 2026-07-28

Assigner: MITRE

Description
In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow in the ID3v2 APIC frame parsing function in audiolib allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a crafted MP3 file. The vulnerability exists due to missing length validation when processing the APIC frame size field, leading to an out-of-bounds memory write.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-28
Last Modified
2026-07-28
Generated
2026-07-28
AI Q&A
2026-07-28
EPSS Evaluated
N/A
NVD
CVE-2026-51275
EUVD
EUVD-2026-49926

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
schreibfaul1 esp32-audioi2s 3.4.5

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-122 A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a heap-based buffer overflow in the schreibfaul1 ESP32-audioI2S library version 3.4.5. The flaw occurs in the ID3v2 APIC album cover frame parsing logic within the Audio::read_MP3_Header() function. The library fails to validate the size of attacker-controlled raw frame length values from MP3 ID3v2 APIC metadata before copying data into a fixed-size heap buffer.

Detection Guidance

To detect this vulnerability, inspect MP3 files for oversized ID3v2 APIC frames. Use tools like 'file' or 'ffprobe' to analyze metadata. On ESP32 devices, monitor for crashes or watchdog reboots after playing MP3 files. Check heap corruption logs if available.

Impact Analysis

The vulnerability can cause a remote denial of service by forcing a hardware watchdog reboot and permanent audio playback failure on ESP32 devices. It may also allow arbitrary code execution due to PSRAM heap memory corruption and data leaks from out-of-bounds memory access.

Compliance Impact

This vulnerability could lead to denial of service or arbitrary code execution, potentially causing unauthorized access to sensitive data processed by the ESP32-audioI2S device. Such breaches may violate GDPR's data protection requirements or HIPAA's security rules if the device handles personal or health information.

Mitigation Strategies

Avoid playing untrusted MP3 files. Disable audio streaming from untrusted sources. Monitor device logs for crashes. Contact the vendor for updates. Implement network-level filtering to block malicious MP3 files.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-51275. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart