CVE-2026-45328 Details

A critical out-of-bounds write vulnerability has been identified in the ESP-IDF framework, specifically within the `esp_tee` component. This issue is present in versions 5.5.4 and 6.0, and arises from secure-service wrappers that bridge calls from the user application to TEE-protected hardware peripherals. Several wrappers failed to properly validate caller-supplied pointer arguments, particularly output data pointers and pointers within struct contexts. This oversight allowed an unprivileged REE application to direct ESP-TEE hardware peripherals to write attacker-influenced content into TEE-resident DRAM, effectively bypassing the REE/TEE isolation boundary. The vulnerability could lead to arbitrary code execution within the TEE, memory corruption, denial of service, and system crashes.

Users are advised to update to ESP-IDF versions 5.5.5 or 6.0.1, both of which include the necessary fixes. Instructions for updating can be found in the ESP-IDF documentation.