CVE-2026-51260
CRITICAL
NVD
CVSS Score
9.4
Severity
CRITICAL
Published
Jul 28, 2026
Vendor
unknown
Description
Unsafe fixed-size memcpy operation in AudioBuffer::writeSpace() of schreibfaul1 ESP32-audioI2S 3.4.5 allows remote heap buffer overflow. The code copies a full UINT16_MAX bytes without validating destination available space, causing out-of-bounds memory write.