CVE-2026-45160

Name of the Vulnerable Software and Affected Versions ESP-IDF versions 5.2.7 through 5.2.7 ESP-IDF versions 5.3.5 through 5.3.5 ESP-IDF versions 5.4.4 through 5.4.4 ESP-IDF versions 5.5.4 through 5.5.4 ESP-IDF versions 6.0.1 through 6.0.1

Description An out-of-bounds read flaw exists in the DHCP server option parser within the lwIP component. The parse options() function in components/lwip/apps/dhcpserver/dhcpserver.c processes the BOOTP/DHCP options field without verifying that the option length byte and declared payload length remain within the received packet buffer. A specially crafted DHCP request can force the parser to read beyond the options buffer into adjacent heap memory. This affects the DHCP server used by SoftAP and any configuration where the device operates as a DHCP server on a local network.

Recommendations Update version 5.2.7 to 5.2.8 Update version 5.3.5 to 5.3.6 Update version 5.4.4 to 5.4.5 Update version 5.5.4 to 5.5.5 Update version 6.0.1 to 6.0.2