CVE-2024-28183

ESP-IDF is the development framework for Espressif SoCs supported on Windows, Linux and macOS. A Time-of-Check to Time-of-Use (TOCTOU) vulnerability was discovered in the implementation of the ESP-IDF bootloader which could allow an attacker with physical access to flash of the device to bypass anti-rollback protection. Anti-rollback prevents rollback to application with security version lower than one programmed in eFuse of chip. This attack can allow to boot past (passive) application partition having lower security version of the same device even in the presence of the flash encryption scheme. The attack requires carefully modifying the flash contents after the anti-rollback checks have been performed by the bootloader (before loading the application). The vulnerability is fixed in 4.4.7 and 5.2.1.

• CWE-367

• https://github.com/espressif/esp-idf/commit/3305cb4d235182067936f8e940e6db174e25b4b2Patch
• https://github.com/espressif/esp-idf/commit/4c95aa445d4e84f01f86b6f3a552aa299276abf3Patch
• https://github.com/espressif/esp-idf/commit/534e3ad1fa68526a5f989fb2163856d6b7cd2c87Patch
• https://github.com/espressif/esp-idf/commit/7003f1ef0dffc73c34eb153d1b0710babb078149Patch
• https://github.com/espressif/esp-idf/commit/b2cdc0678965790f49afeb6e6b0737cd24433a05Patch
• https://github.com/espressif/esp-idf/commit/c33b9e1426121ce8cccf1a94241740be9cff68dePatch
• https://github.com/espressif/esp-idf/commit/f327ddf6adab0c28d395975785727b2feef57803Patch
• https://github.com/espressif/esp-idf/security/advisories/GHSA-22x6-3756-pfp8Vendor Advisory
• https://github.com/espressif/esp-idf/commit/3305cb4d235182067936f8e940e6db174e25b4b2Patch
• https://github.com/espressif/esp-idf/commit/4c95aa445d4e84f01f86b6f3a552aa299276abf3Patch
• https://github.com/espressif/esp-idf/commit/534e3ad1fa68526a5f989fb2163856d6b7cd2c87Patch
• https://github.com/espressif/esp-idf/commit/7003f1ef0dffc73c34eb153d1b0710babb078149Patch
• https://github.com/espressif/esp-idf/commit/b2cdc0678965790f49afeb6e6b0737cd24433a05Patch
• https://github.com/espressif/esp-idf/commit/c33b9e1426121ce8cccf1a94241740be9cff68dePatch
• https://github.com/espressif/esp-idf/commit/f327ddf6adab0c28d395975785727b2feef57803Patch
• https://github.com/espressif/esp-idf/security/advisories/GHSA-22x6-3756-pfp8Vendor Advisory

Published

Mar 25, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-28176jose is JavaScript module for JSON Object Signing and Encryp…5.9
• CVE-2024-28179Jupyter Server Proxy allows users to run arbitrary external …9.8
• CVE-2024-2818An issue has been discovered in GitLab CE/EE affecting all v…6.5
• CVE-2024-28180Package jose aims to provide an implementation of the Javasc…4.3
• CVE-2024-28181 turbo_boost-commands is a set of commands to help you build…8.1
• CVE-2024-28182nghttp2 is an implementation of the Hypertext Transfer Proto…5.3
• CVE-2024-28184WeasyPrint helps web developers to create PDF documents. Sin…7.4
• CVE-2024-28185Judge0 is an open-source online code execution system. The a…10
• CVE-2024-28186FreeScout is an open source help desk and shared inbox built…7.1
• CVE-2024-28187SOY CMS is an open source CMS (content management system) th…7.2
• CVE-2024-28188Jupyter Scheduler is collection of extensions for programmin…5.3
• CVE-2024-28189Judge0 is an open-source online code execution system. The a…10