Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-66409

28
FAUCET Score

CVE-2025-66409 is a critical out-of-bounds read vulnerability affecting Espressif ESP-IDF versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, specifically when the AVRCP component is enabled on ESP32 devices. An unauthenticated attacker can trigger this by sending a malformed VENDOR DEPENDENT command, leading to potential exposure of sensitive memory content or denial of service. With a CVSS score of 9.1 (CRITICAL), this vulnerability is remotely exploitable with low attack complexity and no user interaction required. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
<= 5.1.6CPE matchmatch criteria
cpe:2.3:a:espressif:esp-idf:*:*:*:*:*:*:*:*
>= 5.2, <= 5.2.6CPE matchmatch criteria
cpe:2.3:a:espressif:esp-idf:*:*:*:*:*:*:*:*
>= 5.3, <= 5.3.4CPE matchmatch criteria
cpe:2.3:a:espressif:esp-idf:*:*:*:*:*:*:*:*
>= 5.4, <= 5.4.3CPE matchmatch criteria
cpe:2.3:a:espressif:esp-idf:*:*:*:*:*:*:*:*
>= 5.5, <= 5.5.1CPE matchmatch criteria
cpe:2.3:a:espressif:esp-idf:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 4.0

2.7LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
VS Confidentiality
LOW
VS Integrity
NONE
VS Availability
LOW
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
NONE
Exploit Maturity
UNREPORTED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.57%
Probability of exploitation in next 30 days
EPSS Percentile
43.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0057 is in the 23rd percentile among its peer group of 36,835 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

github_advisorypatch availablevia nvd_reference
View patch

References

github.com / espressif/esp-idf/commit/075ed218cadb8088155521cd8a795d8a626519fb
Patch
github.com / espressif/esp-idf/commit/2f788e59ee361eee230879ae2ec9cf5c893fe372
Patch
github.com / espressif/esp-idf/commit/798029129a71c802cff0e75eb59f902bca8f1946
Patch
github.com / espressif/esp-idf/commit/999710fccf95ae128fe51b5679d6b7c75c50d902
Patch
github.com / espressif/esp-idf/commit/d5db5f60fc1dcfdd8cd3ee898fdefaa272988ace
Patch
github.com / espressif/esp-idf/commit/daeeba230327176b9627b1caa94acdc54065c4b7
Patch
github.com / espressif/esp-idf/security/advisories/GHSA-qhf9-vr2h-jh96
PatchVendor Advisory