CVE-2026-51275 | schreibfaul1 ESP32-audioI2S 3.4.5 APIC frame parsing src/Audio.cpp ID3v2 APIC frame parsing function heap-based overflow

A vulnerability identified as critical has been detected in schreibfaul1 ESP32-audioI2S 3.4.5. This impacts the function ID3v2 APIC frame parsing function of the file src/Audio.cpp of the component APIC frame parsing. Performing a manipulation results in heap-based buffer overflow.

This vulnerability is identified as CVE-2026-51275. The attack can be initiated remotely. There is not any exploit available.