The ESP32-audioI2S library version 3.4.5 contains a heap buffer overflow in the UnpackFrameHeader() function. The function reads multiple index parameters supplied by the caller and uses them to access static and heap arrays without bounds checking. When an attacker supplies invalid indices, the decoder writes beyond the bounds of the targeted arrays, corrupting adjacent heap memory. The flaw is recognized as a buffer overflow (CWE‑121) and can lead to application crashes or unpredictable behavior, but the CVE description does not claim that it enables arbitrary code execution.

The affected product is the ESP32‑audioI2S library released by schreibfaul1, version 3.4.5. No other vendors or products are indicated as vulnerable.

The CVSS score of 7.5 indicates high severity, however the EPSS score is not available so the current likelihood of exploitation is unknown. The vulnerability is not listed in the CISA KEV catalog. Attackers would need to deliver malicious input to the UnpackFrameHeader() routine; the exact delivery mechanism (e.g., a crafted audio stream or network packet) is not specified in the advisory, so it is inferred that some form of control over the data channel feeding the decoder is required.