CVE-2026-51244 | schreibfaul1 ESP32-audioI2S 3.4.5 mp3_decoder.cpp UnpackFrameHeader heap-based overflow

A vulnerability labeled as critical has been found in schreibfaul1 ESP32-audioI2S 3.4.5. This vulnerability affects the function UnpackFrameHeader of the file src/mp3_decoder/mp3_decoder.cpp. Such manipulation leads to heap-based buffer overflow.

This vulnerability is referenced as CVE-2026-51244. It is possible to launch the attack remotely. No exploit is available.