CVE-2024-28183 | Espressif ESP-IDF up to 4.4.6/5.0.6/5.1.3/5.2.0 Anti-Rollback Protection toctou (GHSA-22×6-3756-pfp8)

A vulnerability has been found in Espressif ESP-IDF up to 4.4.6/5.0.6/5.1.3/5.2.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Anti-Rollback Protection. The manipulation leads to time-of-check time-of-use.

This vulnerability is known as CVE-2024-28183. It is possible to launch the attack on the physical device. There is no exploit available.

It is recommended to upgrade the affected component.