An out‑of‑bounds read has been identified in the Bluetooth AVRCP vendor‑command parser of the Espressif Internet of Things Development Framework. The vulnerability can cause the parser to read data beyond the allocated heap buffer, potentially exposing internal and sensitive information. The flaw does not provide code execution or direct denial of service, but it can be used to leak confidential data that resides in memory at the time of the malformed command.

The affected product is Espressif ESP‑IDF, its IoT development framework. Versions susceptible to the issue include 5.2.6, 5.3.5, 5.4.4, 5.5.3, and 6.0. The security fix is available in 5.2.7, 5.3.6, 5.4.5, 5.5.4, and 6.0.1.

The CVSS score of 4.6 indicates a moderate level of risk. No exploit probability score is currently available, and the vulnerability is not listed in CISA’s KEV catalog. Based on the description, the likely attacker must interact with the device’s Bluetooth stack, specifically targeting the AVRCP vendor command interface, to craft a malicious packet that triggers the read. The attack could occur locally via Bluetooth proximity or over a network if the device is exposed to an untrusted remote connection.