From cf21272c94b35331ac9663a3919af4c77ff4c6dd Mon Sep 17 00:00:00 2001 From: zhangyanjiao Date: Thu, 12 Jun 2025 15:51:21 +0800 Subject: [PATCH] fix(wifi): Added CVE-2025-52471 to vulnerabilities list --- docs/en/security/vulnerabilities.rst | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/docs/en/security/vulnerabilities.rst b/docs/en/security/vulnerabilities.rst index 6cda3b51d0..4522645d23 100644 --- a/docs/en/security/vulnerabilities.rst +++ b/docs/en/security/vulnerabilities.rst @@ -7,6 +7,20 @@ This page briefly lists all of the vulnerabilities that are discovered and fixed .. note:: Please refer to ``latest`` version of this documentation guide for up-to-date information. +CVE-2025 +-------- + +CVE-2025-52471 +~~~~~~~~~~~~~~ + +ESP-NOW Integer Underflow Vulnerability Advisory + +* Espressif Advisory: NA (Published on GitHub) +* Impact: Applicable for ESP-IDF +* Resolution: Please see advisory for details +* Advisory pointer: `GHSA-hqhh-cp47-fv5g`_ + + CVE-2024 -------- @@ -195,3 +209,4 @@ Security Advisory Concerning Wi-Fi Authentication Bypass .. _`GHSA-22x6-3756-pfp8` : https://github.com/espressif/esp-idf/security/advisories/GHSA-22x6-3756-pfp8 .. _`GHSA-7f7f-jj2q-28wm` : https://github.com/espressif/esp-idf/security/advisories/GHSA-7f7f-jj2q-28wm .. _`GHSA-wm57-466g-mhrr` : https://github.com/espressif/esp-idf/security/advisories/GHSA-wm57-466g-mhrr +.. _`GHSA-hqhh-cp47-fv5g` : https://github.com/espressif/esp-idf/security/advisories/GHSA-hqhh-cp47-fv5g