CVE-2026-51268

Name of the Vulnerable Software and Affected Versions schreibfaul1 ESP32-audioI2S version 3.4.5

Description A heap-based buffer overflow exists in the host parsing logic. The dismantle host() function parses untrusted host and URL input, and subsequent code uses clone from() to copy parsed host, request host, extension, and query string segments into fixed heap buffers without boundary checking.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.