CVE-2026-55687 Details

A stack-based out-of-bounds write vulnerability has been identified in the JPEG decoder of the Espressif Internet of Things Development Framework (ESP-IDF) versions 6.0.1, 5.5.4, 5.4.4, and 5.3.5. The issue arises in the 'jpeg_parse_dqt_marker()' function within 'components/esp_driver_jpeg/jpeg_parse_marker.c'. When the decoder processes a Define Quantization Table (DQT) segment, it reads the 'Tq' nibble from the DQT marker without proper validation, allowing an attacker to manipulate the input and write beyond the allocated array into adjacent stack memory. This memory corruption reliably triggers a denial-of-service condition by causing a 'Stack smashing protect failure' panic, particularly on ESP32-P4 devices. While the primary impact is denial-of-service, the vulnerability could potentially be exploited for code execution under certain conditions, such as on builds without stack protection.

Users can upgrade to ESP-IDF version 6.0.2, 5.5.5, 5.4.5, or 5.3.6, all of which include the necessary fix. Instructions for downloading these versions are available in the ESP-IDF Programming Guide.