VULNERABILITY INTELLIGENCE
CVE-2021-28139
CVSS score8.8 HIGH
EPSS probability1.39%
CISA KEVNot currently listed
Published2021-09-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet, allowing attackers in radio range to trigger arbitrary code execution in ESP32 via a crafted Extended Features bitfield payload.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- cve@mitre.org — Technical Description, Third Party Advisory
- cve@mitre.org — Product, Third Party Advisory
- cve@mitre.org — Product, Third Party Advisory
- cve@mitre.org — Product, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Technical Description, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Product, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Product, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Product, Vendor Advisory