Knowledge · Vulnerabilities by version

ESP-IDF 5.1.7: no CVE listed

For ESP-IDF 5.1.7 the sources checked name no CVE.

As of 13 Nov 2026, the sources checked name no CVE for ESP-IDF 5.1.7.

Data queried 13 November 2026 · Page updated 13 November 2026 · 1 min read

At a glance
Version
ESP-IDF 5.1.7
Known CVEs
0
Critical / high
0 / 0
Actively exploited (CISA KEV)
0
Confirmed by the vendor
0

Checked on 13 Nov 2026

Which CVEs affect ESP-IDF 5.1.7?

No CVE listed.

What changed against ESP-IDF 5.1.6?

7 CVEs of 5.1.6 are no longer listed for 5.1.7: CVE-2025-52471, CVE-2025-66409, CVE-2025-68473, CVE-2025-68474, CVE-2026-25507, CVE-2026-25508, CVE-2026-25532.

No CVE was added in 5.1.7.

What does the number mean for a device?

Counted are the CVEs public sources name for ESP-IDF version 5.1.7. "Confirmed by the vendor" means the CVE record or advisory comes from the vendor itself and names this version as affected. Third-party records are counted but not marked as confirmed.

Whether a CVE is exploitable in a given device depends on which functions of the library the build contains and how they are configured. The list shows what is known for the version.

Questions

How many CVEs does ESP-IDF 5.1.7 have?

As of 13 Nov 2026, the sources checked name no CVE for ESP-IDF 5.1.7.

From which version are the CVEs of ESP-IDF 5.1.7 fixed?

No CVE is listed for ESP-IDF 5.1.7.

Sources

    Which ESP-IDF version is in your build?

    Vendor SDKs ship their own versions. Upload the AXF, HEX or firmware image: we read the versions from the binary and match the CVEs. Report and SBOM within three working days, free. The reports are in German.