CVE-2025-27840: Espressif ESP32 Firmware

Medium severity, CVSS 6.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).

Affected products

• Espressif ESP32 Firmware: affected versions not specified

Published 2025-03-08. Last modified 2026-06-17.