{"uuid": "80cd4488-a008-40ce-80cd-f977df690231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51252", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mrqmqkcihu2i", "content": "Critical CVE landed today in ESP32:\n\nCVE-2026-51252. schreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in the MP3Decoder::UnpackSFMPEG1 function due to missing input validation on attacker-controlled MP3 metadata.\n\nnvd.nist.gov/vuln/detail/CVE-2026-51252", "creation_timestamp": "2026-07-29T00:02:49.704977Z"}