CVE-2025-68473

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, in the ESP-IDF Bluetooth host stack (BlueDroid), the function bta_dm_sdp_result() used a fixed-size array uuid_list[32][MAX_UUID_SIZE] to store discovered service UUIDs during the SDP (Service Discovery Protocol) process. On modern Bluetooth devices, it is possible for the number of available services to exceed this fixed limit (32). In such cases, if more than 32 services are discovered, subsequent writes to uuid_list could exceed the bounds of the array, resulting in a potential out-of-bounds write condition.

• CWE-787

• https://github.com/espressif/esp-idf/commit/3286e45349b0b5c2b1422ef7e8d088b95eef895dPatch
• https://github.com/espressif/esp-idf/commit/4d928f2265c394d2abc85024228e920a5b26bcabPatch
• https://github.com/espressif/esp-idf/commit/5b3185168dae83d42aa0852689422fffd931f16cPatch
• https://github.com/espressif/esp-idf/commit/6453f57a954458ad8ffd6e4bf2d9e76b73fac0f1Patch
• https://github.com/espressif/esp-idf/commit/6ca6f422dafaffcb88fa56cc458ce92d96be3b2ePatch
• https://github.com/espressif/esp-idf/commit/9889edd799cf369e082df9d01adba961d64693edPatch
• https://github.com/espressif/esp-idf/commit/ecb86d353640cf1375bf97db32e702ba59c551b6Patch
• https://github.com/espressif/esp-idf/security/advisories/GHSA-hmjj-rjvv-w8pqMitigation, Vendor Advisory

Published

Dec 27, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-68468Avahi is a system which facilitates service discovery on a l…6.5
• CVE-2025-68469ImageMagick is free and open-source software used for editin…3.3
• CVE-2025-6847A vulnerability classified as critical was found in code-pro…9.8
• CVE-2025-68470React Router is a router for React. In versions 6.0.0 throug…6.5
• CVE-2025-68471Avahi is a system which facilitates service discovery on a l…6.5
• CVE-2025-68472MindsDB is a platform for building artificial intelligence f…9.1
• CVE-2025-68474ESF-IDF is the Espressif Internet of Things (IOT) Developmen…7.6
• CVE-2025-68475Fedify is a TypeScript library for building federated server…7.5
• CVE-2025-68476KEDA is a Kubernetes-based Event Driven Autoscaling componen…8.2
• CVE-2025-68477Langflow is a tool for building and deploying AI-powered age…6.5
• CVE-2025-68478Langflow is a tool for building and deploying AI-powered age…7.1
• CVE-2025-68479Discourse is an open source discussion platform. In versions…5.3