CVE-2025-68657

Katalog CVE

CVSS 6.4 · Medium EPSS 0,16%

Kerentanan Double Free pada espressif usb host hid driver. Skor CVSS 3.1 6.4 (Medium) menurut github.com.

Deskripsi (NVD)

Espressif ESP-IDF USB Host HID (Human Interface Device) Driver allows access to HID devices. Prior to 1.1.0, calls to hid_host_device_close() can free the same usb_transfer_t twice. The USB event callback and user code share the hid_iface_t state without locking, so both can tear down a READY interface simultaneously, corrupting heap metadata inside the ESP USB host stack. This vulnerability is fixed in 1.1.0.

Rincian

Terbit di NVD

12 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.4 (Medium), sumber github.com
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-415: Double Free
CWE-667: Improper Locking

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/espressif/esp-usb/security/advisories/GHSA-gp8r-qjfr-gqfv patch · advisory vendor
• https://github.com/espressif/esp-usb/commit/cd28106e9f72ac2719682c06f94601f9f034390b patch
• https://components.espressif.com/components/espressif/usb_host_hid/versions/1.1.0/changelog release notes