← Back

CVE-2025-68657

nvd nist
Published: Jan 12, 2026Modified: Jan 22, 2026

JSON object

Loading...
6.4
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.5 / Impact: 5.9
Source: security-advisories@github.com (Secondary)

Description

Espressif ESP-IDF USB Host HID (Human Interface Device) Driver allows access to HID devices. Prior to 1.1.0, calls to hid_host_device_close() can free the same usb_transfer_t twice. The USB event callback and user code share the hid_iface_t state without locking, so both can tear down a READY interface simultaneously, corrupting heap metadata inside the ESP USB host stack. This vulnerability is fixed in 1.1.0.

Affected (1)

Espressif
1 product
Usb Host Hid Driver
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Usb Host Hid Driver
Before 1.1.0

Related CWEs

CWE-415
Double Free
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.
CWE-667
Improper Locking
The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

References (3)

Source: security-advisories@github.com
Release Notes
Source: security-advisories@github.com
Patch
Source: security-advisories@github.com
Vendor AdvisoryPatch

Timeline

No history available yet.