CVE-2026-55687 | espressif esp-idf up to 6.0.1 JPEG Parser jpeg_parse_marker.c jpeg_parse_dqt_marker Tq out-of-bounds write

A vulnerability identified as problematic has been detected in espressif esp-idf up to 6.0.1. Impacted is the function jpeg_parse_dqt_marker of the file components/esp_driver_jpeg/jpeg_parse_marker.c of the component JPEG Parser. Performing a manipulation of the argument Tq results in out-of-bounds write.

This vulnerability is reported as CVE-2026-55687. The attack is possible to be carried out remotely. No exploit exists.