VulnWatch VulnWatch
← Back to dashboard
Critical nvd · CVE-2026-51263

CVE-2026-51263: schreibfaul1 ESP32-audioI2S 3.4.5 is vulnerable to Buffer Overflow. The Audio::openai_speech function in the Audio libra

Published Jul 28, 2026 CVSS 9.8

schreibfaul1 ESP32-audioI2S 3.4.5 is vulnerable to Buffer Overflow. The Audio::openai_speech function in the Audio library manually constructs JSON request bodies and HTTP request headers by directly concatenating externally controllable input and instructions strings without effective length restriction and boundary validation. An unauthenticated remote attacker can send oversized malicious string data to trigger a heap buffer overflow during string splicing, resulting in memory corruption.

Affected AI Products

openai
Get the weekly digest. Every Monday: top AI security stories of the week. Free.