{"vulnerability": "cve-2026-5125", "sightings": [{"uuid": "3ad685da-131f-4217-84f9-dcb76cb4a9d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5125", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3micjqk2t642d", "content": "", "creation_timestamp": "2026-03-30T20:45:07.322352Z"}, {"uuid": "be68442c-6844-4d33-b918-d23bf357f98c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51254", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mrty4cruug2m", "content": "CVE-2026-51254 [HIGH] ESP32\n\nschreibfaul1 ESP32-audioI2S v3.4.5 has an integer underflow vulnerability in the MP3Decoder::GetBits() function of the MP3 decoder due to unchecked bit reading operations. The lack of validation on the nBits parameter c\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-51254", "creation_timestamp": "2026-07-30T08:04:14.837036Z"}, {"uuid": "70883353-c1c7-4ee5-97f2-9abd40e5efd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51251", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mrtkopperp25", "content": "ESP32: CVE-2026-51251 [HIGH]\n\nSchreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in the MP3Decoder::decode() function of the MP3 decoder due to missing size validation on untrusted mainDataBegin and nSlots values.\n\nnvd.nist.gov/vuln/detail/CVE-2026-51251", "creation_timestamp": "2026-07-30T04:04:04.590728Z"}, {"uuid": "293177e9-69a2-4d92-a8b5-b6f9f7d3693e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51252", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrq4ipgtta2u", "content": "CVE-2026-51252\nA vulnerability in the schreibfaul1 ESP32-audioI2S MP3 decoder could allow an attacker to execute malicious code. This could happen if an attacker sends a specially crafted MP3 file to a system using this\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-28T19:12:06.431876Z"}, {"uuid": "e43d860a-f179-4ce6-908f-8d7b47e25b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51259", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrq4mb5ppf2k", "content": "CVE-2026-51259\nA software bug in ESP32-audioI2S 3.4.5 can cause the system to run out of memory or behave unexpectedly when handling audio data. This can lead to device crashes or potentially allow unauthorized access to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-28T19:14:05.947457Z"}, {"uuid": "80cd4488-a008-40ce-80cd-f977df690231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51252", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mrqmqkcihu2i", "content": "Critical CVE landed today in ESP32:\n\nCVE-2026-51252. schreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in the MP3Decoder::UnpackSFMPEG1 function due to missing input validation on attacker-controlled MP3 metadata.\n\nnvd.nist.gov/vuln/detail/CVE-2026-51252", "creation_timestamp": "2026-07-29T00:02:49.704977Z"}]}