Security Advisory

CVE-2026-51260

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-28 00:00:00
Last updated 2026-07-28 18:27:59
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Unsafe fixed-size memcpy operation in AudioBuffer::writeSpace() of schreibfaul1 ESP32-audioI2S 3.4.5 allows remote heap buffer overflow. The code copies a full UINT16_MAX bytes without validating destination available space, causing out-of-bounds memory write.