CVE-2026-51252
CRITICAL
NVD
CVSS Score
9.8
Severity
CRITICAL
Published
Jul 28, 2026
Vendor
unknown
Description
schreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in the MP3Decoder::UnpackSFMPEG1 function due to missing input validation on attacker-controlled MP3 metadata.