CVE-2022-24893

Name of the Vulnerable Software and Affected Versions ESP-IDF versions 4.1 through 4.4

Description A memory corruption issue can be triggered in the ESP-BLE-MESH component during provisioning due to the lack of a check for the SegN field of the Transaction Start PDU. This can lead to memory corruption-related attacks, potentially allowing an attacker to gain control of the entire system.

Recommendations For ESP-IDF versions 4.1 through 4.4, upgrade to a patched version, as patch commits are available on these branches.