{"id":"CVE-2026-25507","summary":"ESF-IDF Has Use-after-free Vulnerability in BLE Provisioning","details":"ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, a use-after-free vulnerability was reported in the BLE provisioning transport (protocomm_ble) layer. The issue can be triggered by a remote BLE client while the device is in provisioning mode. The vulnerability occurred when provisioning was stopped with keep_ble_on = true. In this configuration, internal protocomm_ble state and GATT metadata were freed while the BLE stack and GATT services remained active. Subsequent BLE read or write callbacks dereferenced freed memory, allowing a connected or newly connected client to trigger invalid memory acces. This issue has been patched in versions 5.5.3, 5.4.4, 5.3.5, 5.2.7, and 5.1.7.","aliases":["GHSA-h7r3-gmg9-xjmg"],"modified":"2026-08-12T15:31:54.463268Z","published":"2026-02-04T17:58:18.605Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-416"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25507.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25507.json"},{"type":"ADVISORY","url":"https://github.com/espressif/esp-idf/security/advisories/GHSA-h7r3-gmg9-xjmg"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25507"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/espressif/esp-idf","events":[{"introduced":"7452b1cb1d22cd1b439a6a922548efacea98ee72"},{"fixed":"0540c85140c2c06c0cbecc8843277ea676d5c4a9"},{"fixed":"1ff264abf2504cade46f0ce3a03f821310bcf6d7"},{"fixed":"47552ff4fd824caf38215468ebd2f31fb5f36d70"},{"fixed":"4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6"},{"fixed":"894c28afe3f2f8f31ff25b64191883517dddb5cf"},{"fixed":"cde7b7362adc15638c141c249681cbe5d23de663"},{"fixed":"dba9a7dc01e4dab14c77d328f6a6f46369aeee63"}],"database_specific":{"cpe":["cpe:2.3:a:espressif:esp-idf:5.1.6:*:*:*:*:*:*:*","cpe:2.3:a:espressif:esp-idf:5.2.6:*:*:*:*:*:*:*","cpe:2.3:a:espressif:esp-idf:5.3.4:*:*:*:*:*:*:*","cpe:2.3:a:espressif:esp-idf:5.4.3:*:*:*:*:*:*:*","cpe:2.3:a:espressif:esp-idf:5.5.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.1.6"},{"last_affected":"5.1.6"},{"introduced":"5.2.6"},{"last_affected":"5.2.6"},{"introduced":"5.3.4"},{"last_affected":"5.3.4"},{"introduced":"5.4.3"},{"last_affected":"5.4.3"},{"introduced":"5.5.2"},{"last_affected":"5.5.2"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["5.1.6","5.2.6","5.3.4","5.4.3","5.5.2","= 5.1.6","= 5.2.6","= 5.3.4","= 5.4.3","= 5.5.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-25507.json","vanir_signatures_modified":"2026-08-12T15:31:54Z","vanir_signatures":[{"id":"CVE-2026-25507-00a1ac34","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_read"},"deprecated":false,"digest":{"function_hash":"63200799082803172625061943333402630734","length":1305}},{"id":"CVE-2026-25507-020cdb06","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_connect"},"deprecated":false,"digest":{"length":990,"function_hash":"259771385175438895452569171096745912782"}},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false,"digest":{"function_hash":"52800084617639390724813296554893868485","length":133},"id":"CVE-2026-25507-0291d521","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"uuid128_to_handler"},"deprecated":false,"digest":{"function_hash":"185066475565834699703649049016163648732","length":499},"id":"CVE-2026-25507-055153a5"},{"deprecated":false,"digest":{"function_hash":"45462595951379773585941786623287409556","length":373},"id":"CVE-2026-25507-06053402","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_dsc_access"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_chr_access"},"deprecated":false,"digest":{"function_hash":"97570995413996262338588027328006426387","length":2248},"id":"CVE-2026-25507-07066023"},{"deprecated":false,"digest":{"function_hash":"325787697391706651632886409764734061468","length":691},"id":"CVE-2026-25507-07ee25cf","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"function":"protocomm_ble_cleanup","file":"components/protocomm/src/transports/protocomm_ble.c"}},{"digest":{"function_hash":"52800084617639390724813296554893868485","length":133},"id":"CVE-2026-25507-09e76b5b","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"protocomm_ble_start"},"deprecated":false,"digest":{"function_hash":"7710572293241587155673302250622560351","length":3842},"id":"CVE-2026-25507-0a9bf2a7","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"63200799082803172625061943333402630734","length":1305},"id":"CVE-2026-25507-0b728330","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_read"}},{"deprecated":false,"digest":{"function_hash":"159964077914903168610949221589574897068","length":369},"id":"CVE-2026-25507-0b94bb8f","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"handle_to_handler"}},{"deprecated":false,"digest":{"function_hash":"265092944354878825703380833765338138336","length":1044},"id":"CVE-2026-25507-0bec9530","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_connect"}},{"source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"function":"transport_simple_ble_read","file":"components/protocomm/src/transports/protocomm_ble.c"},"deprecated":false,"digest":{"function_hash":"63200799082803172625061943333402630734","length":1305},"id":"CVE-2026-25507-0e0bf1fd","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_connect"},"deprecated":false,"digest":{"function_hash":"259771385175438895452569171096745912782","length":990},"id":"CVE-2026-25507-0eed2a27"},{"deprecated":false,"digest":{"line_hashes":["315096193931674132959326456275400050276","251510484522902961588729127448224250934","83172832641155593798515671104347638858","161839469816953246151106074888481895376"],"threshold":0.9},"id":"CVE-2026-25507-120a7d65","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/simple_ble/simple_ble.c"}},{"source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"function":"uuid128_to_handler","file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false,"digest":{"function_hash":"185066475565834699703649049016163648732","length":499},"id":"CVE-2026-25507-1506cc3c","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"63200799082803172625061943333402630734","length":1305},"id":"CVE-2026-25507-15098625","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_read"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"handle_to_handler"},"deprecated":false,"digest":{"function_hash":"159964077914903168610949221589574897068","length":369},"id":"CVE-2026-25507-152e2649"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"uuid128_to_handler"},"deprecated":false,"digest":{"function_hash":"185066475565834699703649049016163648732","length":499},"id":"CVE-2026-25507-1711d50c"},{"target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"protocomm_ble_stop"},"deprecated":false,"digest":{"function_hash":"175949270531941533956132385938030403612","length":913},"id":"CVE-2026-25507-17279cb2","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663"},{"id":"CVE-2026-25507-1d36e81a","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"function":"gatt_svr_chr_access","file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false,"digest":{"function_hash":"97570995413996262338588027328006426387","length":2248}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["21378149387348444712870074521680112632","152625781465593429671681918063545965789","236000702885165517364605329453060666273","133065752810075120727216215306936757451","89378130330309579133929290092892803597","27408393792113586493953809787867927713"]},"id":"CVE-2026-25507-1d66f76a","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/simple_ble/simple_ble.h"}},{"source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_exec_write"},"deprecated":false,"digest":{"function_hash":"302502728169829495849238234762842032783","length":1193},"id":"CVE-2026-25507-1dfb4026","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["14995544720486937275774499710030464432","281156845558696565371763276525268589323","126641375047763858361145910998321931866","62473897938282535547686015161346783899","156100672753514161061016751509569238140","38984603111101267351480134305415949000","322382760380431200178322535805649536959","315903252159372237838500514873033508191","32720033850564844600880951053237579536","279273384036628430423100607185785054039","190903419842105574475501500775698464944","142717586158111270503823819061807603173","144189770428534875302669861187602610976","93194311289380118336124934858187992031","302017215365287451989701613141899619770","225898782230722386791742901136852980513","230693998704787385367614072333989838005","80166315916574719093926685697368683660","122269716863542909393186175246101033396","230693998704787385367614072333989838005","103485723289278307706768719667829574538","301884057955978051794073525212486723132","92598134377928132239649360454323652087","39699313502254205028906459162406368675","13397558939649396386474486187805786758","41866232512888504942304128357938133406","17376449365540832315957925428087940526","307807303052934585450808173196331905295","172649782484658335594624641698144433658","29174696824622897686174599313683294026","60348303524838200837806915240836162976","205130950075328670660949362543217903963","306998882643252163661099685640581103127","325525173887703431291165741884775863797","256680665047900213289469041958523339653","246798283590726802912001083736206760991","50520197031508710948810545887463528096","231272143041137437160707085319672213152","23288644252381244891680926030942712387","10043714531096977963924683688079767543","44316419598897803009350219757313110328","289623291231414906088777760183928469938","314540119803240203625407961711609831781","285933844330886021754075661293939809104","235336850875718822200596618404899875078","205308063672049669863790528369528626174","259142076475321563649603459477676133333","275543465635192408518476595658462265385","324639382510266819127169904810907270598","220189664991189490637630175853138998731","42749813068584468022765656708074434424","297464230861028806264540141843722149732","100141813110512949510394868585705141646","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25507-1f1f495d","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c"}},{"id":"CVE-2026-25507-2528b9b7","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_disconnect"},"deprecated":false,"digest":{"function_hash":"252852174837927050436042974481345170084","length":1165}},{"deprecated":false,"digest":{"function_hash":"259771385175438895452569171096745912782","length":990},"id":"CVE-2026-25507-26474474","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_connect"}},{"target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_write"},"deprecated":false,"digest":{"length":1272,"function_hash":"66030955795817474467566410532838072500"},"id":"CVE-2026-25507-268b5008","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63"},{"deprecated":false,"digest":{"length":1305,"function_hash":"63200799082803172625061943333402630734"},"id":"CVE-2026-25507-26ad4f50","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_read"}},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"protocomm_ble_stop"},"deprecated":false,"digest":{"length":818,"function_hash":"167022205343871210898130668753455260858"},"id":"CVE-2026-25507-28105d74","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"29663101477782023129658245969149268064","length":123},"id":"CVE-2026-25507-2963287b","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_set_mtu"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_chr_access"},"deprecated":false,"digest":{"length":2248,"function_hash":"97570995413996262338588027328006426387"},"id":"CVE-2026-25507-2ad49af8"},{"target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_cleanup"},"deprecated":false,"digest":{"function_hash":"325787697391706651632886409764734061468","length":691},"id":"CVE-2026-25507-2e340b89","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9"},{"deprecated":false,"digest":{"function_hash":"252852174837927050436042974481345170084","length":1165},"id":"CVE-2026-25507-2e6b9f6b","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_disconnect"}},{"digest":{"function_hash":"175949270531941533956132385938030403612","length":913},"id":"CVE-2026-25507-2e89d673","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"protocomm_ble_stop"},"deprecated":false},{"id":"CVE-2026-25507-2f7dae77","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_stop"},"deprecated":false,"digest":{"function_hash":"25331609710130255005843060589479922153","length":571}},{"id":"CVE-2026-25507-2f917fda","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_connect"},"deprecated":false,"digest":{"function_hash":"259771385175438895452569171096745912782","length":990}},{"deprecated":false,"digest":{"function_hash":"167022205343871210898130668753455260858","length":818},"id":"CVE-2026-25507-2f92887a","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"protocomm_ble_stop"}},{"source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_dsc_access"},"deprecated":false,"digest":{"function_hash":"45462595951379773585941786623287409556","length":373},"id":"CVE-2026-25507-3483eb13","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-25507-353f5971","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_connect"},"deprecated":false,"digest":{"function_hash":"265092944354878825703380833765338138336","length":1044}},{"deprecated":false,"digest":{"function_hash":"137977890203657838024463867444851577239","length":1090},"id":"CVE-2026-25507-3682ae24","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_disconnect"}},{"deprecated":false,"digest":{"function_hash":"45462595951379773585941786623287409556","length":373},"id":"CVE-2026-25507-36a36f16","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_dsc_access"}},{"source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c"},"deprecated":false,"digest":{"line_hashes":["257710264239704648227060232753346472612","191272456561381813988499269567325909799","120170865655081233682433304943533894427","32393058709236010179031793725661346622","21370391142885345095148611871644375611","97825778069687380037534977532010009802","246508871972459452726291885168072807557","281006511243982490344942443086886345087","244807548812852247264822494116682379642","58633829289552352613329210069842326384","261743385782775486851058475146143128234","260336413357353524056592476100375830586","6403994011351223087011048287023730918","177912674532721776956925475705211198728","318701918645424790588459160778805306676","101282999868686696806129532337943833204","285323255698958326450143928637599192282","260849133137630298758053022077191640656","259283405024063495438217518167157745266","211171762541864366821440965914535360712","221639113771852350065397501325224551592","116965301512959357285961195660163724577","328557855233430996665040222619231622341","300562617480593172536952913037424856968","164798815645570053988166372618537775337","258272738451812475861075652189910684284","48771159233669945975554797462733047346","40904896292973127358064133725647846","230693998704787385367614072333989838005","80166315916574719093926685697368683660","132245061728982872117091873350343975631","256569740479023789542707559100443732236","310782953103250125739886682930339281661","133763774347138115511292481038125693521","40904896292973127358064133725647846","230693998704787385367614072333989838005","103485723289278307706768719667829574538","87833027963148101384350870641982731386","133360392153856581929072633477251683360","170002391055020272968536153207288763445","186349025901675348896286860913784273159","338407048549300573683197613038948592792","241401798012532152388774189880585612580","190739601565344670200017528739349133085","121054594478200758090319324772495912393","24032427381127620851219797410527550641","1607587221917510676949498437119421598","251228176731292428129831321819074086122","104414682028185540061533032255749974548","61317576666999109176700232866034832349","252108714120504479691760312162722685385","45182758668270968110375149399302495827","29174696824622897686174599313683294026","296527540201909041392749463929930676993","165285451311214586206799876272560986142","165137778531504994716004771240476085421","301702447840036816887543860635180887757","79951578423774237636867445848485060455","271952480959408333370951241425238275695","208276206156888990735625202316702798628","284787200966007752833796429188004748861","197162619818149378243036155725851501758","164809818845664916219060741039574873025","48208582180861149522199007990478004153","85963354425167730939075044251024139352","247167436728612792580530030972844083652","53800392318657248124442643839055904693","183703022832257531494003559932363281481","120159778013182085180317695603820128453","25308624880274732059097199507510744640","298603250738959558840975376529198660865","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25507-37864834","signature_type":"Line","signature_version":"v1"},{"target":{"file":"components/protocomm/include/transports/protocomm_ble.h"},"deprecated":false,"digest":{"line_hashes":["37132769335001316011630232488543223298","236869822182097671947913059453617233632","67001943298285646926996708175618872107","253815258379195207251207737182207068430","102852124467079388079280471334101206016"],"threshold":0.9},"id":"CVE-2026-25507-398d4c41","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6"},{"deprecated":false,"digest":{"length":1305,"function_hash":"63200799082803172625061943333402630734"},"id":"CVE-2026-25507-3ed9966f","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"function":"transport_simple_ble_read","file":"components/protocomm/src/transports/protocomm_ble.c"}},{"deprecated":false,"digest":{"function_hash":"52800084617639390724813296554893868485","length":133},"id":"CVE-2026-25507-4111da9c","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_set_mtu"}},{"digest":{"line_hashes":["257710264239704648227060232753346472612","329764188385261334565992717220351168316","120170865655081233682433304943533894427","32393058709236010179031793725661346622","21370391142885345095148611871644375611","97825778069687380037534977532010009802","246508871972459452726291885168072807557","281006511243982490344942443086886345087","244807548812852247264822494116682379642","58633829289552352613329210069842326384","261743385782775486851058475146143128234","260336413357353524056592476100375830586","6403994011351223087011048287023730918","177912674532721776956925475705211198728","318701918645424790588459160778805306676","101282999868686696806129532337943833204","285323255698958326450143928637599192282","260849133137630298758053022077191640656","259283405024063495438217518167157745266","211171762541864366821440965914535360712","221639113771852350065397501325224551592","164798815645570053988166372618537775337","258272738451812475861075652189910684284","48771159233669945975554797462733047346","40904896292973127358064133725647846","230693998704787385367614072333989838005","80166315916574719093926685697368683660","132245061728982872117091873350343975631","256569740479023789542707559100443732236","310782953103250125739886682930339281661","133763774347138115511292481038125693521","40904896292973127358064133725647846","230693998704787385367614072333989838005","103485723289278307706768719667829574538","87833027963148101384350870641982731386","133360392153856581929072633477251683360","170002391055020272968536153207288763445","186349025901675348896286860913784273159","338407048549300573683197613038948592792","241401798012532152388774189880585612580","190739601565344670200017528739349133085","121054594478200758090319324772495912393","24032427381127620851219797410527550641","61317576666999109176700232866034832349","252108714120504479691760312162722685385","45182758668270968110375149399302495827","29174696824622897686174599313683294026","33767420788268105640751016783522760772","253179518615540642366295748549525298510","36399169746633953973444720281940617483","126744274385603041662427707913519049681","176309035702742730672763291313291532739","79951578423774237636867445848485060455","271952480959408333370951241425238275695","208276206156888990735625202316702798628","284787200966007752833796429188004748861","332478570617641557769369082302790746094","208939754611489517550267289680481607442","53800392318657248124442643839055904693","86677704636607069303982909698592973070","195995100685626679922398767614059534385","338399132429815480241577549995444436226","127146488309612988117538535159740474241","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25507-4386e309","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_ble.c"},"deprecated":false},{"target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"uuid128_to_handler"},"deprecated":false,"digest":{"function_hash":"185066475565834699703649049016163648732","length":499},"id":"CVE-2026-25507-45bd8a04","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6"},{"digest":{"length":2038,"function_hash":"246071474191416490191291873685275861098"},"id":"CVE-2026-25507-47121ee0","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"prepare_write_event_env"},"deprecated":false},{"target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"prepare_write_event_env"},"deprecated":false,"digest":{"length":2038,"function_hash":"246071474191416490191291873685275861098"},"id":"CVE-2026-25507-476ca6b4","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9"},{"deprecated":false,"digest":{"length":369,"function_hash":"159964077914903168610949221589574897068"},"id":"CVE-2026-25507-48087f47","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"handle_to_handler"}},{"digest":{"function_hash":"66030955795817474467566410532838072500","length":1272},"id":"CVE-2026-25507-4808ce95","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_write"},"deprecated":false},{"id":"CVE-2026-25507-4ae2fc20","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"prepare_write_event_env"},"deprecated":false,"digest":{"length":2038,"function_hash":"246071474191416490191291873685275861098"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"prepare_write_event_env"},"deprecated":false,"digest":{"function_hash":"246071474191416490191291873685275861098","length":2038},"id":"CVE-2026-25507-4d740919"},{"deprecated":false,"digest":{"function_hash":"289014452143663299104615714689827749914","length":2352},"id":"CVE-2026-25507-4e735c38","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/simple_ble/simple_ble.c","function":"simple_ble_start"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_chr_access"},"deprecated":false,"digest":{"function_hash":"97570995413996262338588027328006426387","length":2248},"id":"CVE-2026-25507-55b75150"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false,"digest":{"function_hash":"52800084617639390724813296554893868485","length":133},"id":"CVE-2026-25507-5a957de3"},{"target":{"function":"gatt_svr_chr_access","file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false,"digest":{"length":2248,"function_hash":"97570995413996262338588027328006426387"},"id":"CVE-2026-25507-5d6391cb","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_disconnect"},"deprecated":false,"digest":{"function_hash":"137977890203657838024463867444851577239","length":1090},"id":"CVE-2026-25507-5efb979e"},{"digest":{"function_hash":"66030955795817474467566410532838072500","length":1272},"id":"CVE-2026-25507-6176f407","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"function":"transport_simple_ble_write","file":"components/protocomm/src/transports/protocomm_ble.c"},"deprecated":false},{"target":{"file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false,"digest":{"line_hashes":["14995544720486937275774499710030464432","281156845558696565371763276525268589323","126641375047763858361145910998321931866","62473897938282535547686015161346783899","156100672753514161061016751509569238140","38984603111101267351480134305415949000","322382760380431200178322535805649536959","315903252159372237838500514873033508191","32720033850564844600880951053237579536","279273384036628430423100607185785054039","190903419842105574475501500775698464944","142717586158111270503823819061807603173","144189770428534875302669861187602610976","93194311289380118336124934858187992031","302017215365287451989701613141899619770","225898782230722386791742901136852980513","230693998704787385367614072333989838005","80166315916574719093926685697368683660","122269716863542909393186175246101033396","230693998704787385367614072333989838005","103485723289278307706768719667829574538","301884057955978051794073525212486723132","92598134377928132239649360454323652087","39699313502254205028906459162406368675","13397558939649396386474486187805786758","41866232512888504942304128357938133406","17376449365540832315957925428087940526","307807303052934585450808173196331905295","172649782484658335594624641698144433658","29174696824622897686174599313683294026","60348303524838200837806915240836162976","205130950075328670660949362543217903963","306998882643252163661099685640581103127","325525173887703431291165741884775863797","256680665047900213289469041958523339653","294986393455524337286040999653781525514","212112096660266839276265631858447557868","85421471902794362595936537186799806452","289623291231414906088777760183928469938","314540119803240203625407961711609831781","207120756591492767955500564449774603776","111688344916544619213706508410688729808","324639382510266819127169904810907270598","90698760234708858641811920697853453880","296848202541553201947183697581057762398","275111386154300975225333664178665769109","127146488309612988117538535159740474241","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25507-639162a2","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false,"digest":{"length":133,"function_hash":"52800084617639390724813296554893868485"},"id":"CVE-2026-25507-648e38f0","signature_type":"Function"},{"target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"handle_to_handler"},"deprecated":false,"digest":{"function_hash":"159964077914903168610949221589574897068","length":369},"id":"CVE-2026-25507-64e1103e","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf"},{"deprecated":false,"digest":{"function_hash":"45462595951379773585941786623287409556","length":373},"id":"CVE-2026-25507-6506aa8c","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_dsc_access"}},{"deprecated":false,"digest":{"function_hash":"284936264160764206896614385607726257107","length":650},"id":"CVE-2026-25507-6682b779","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_stop"}},{"deprecated":false,"digest":{"length":369,"function_hash":"159964077914903168610949221589574897068"},"id":"CVE-2026-25507-6872ee69","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"handle_to_handler"}},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"function":"gatt_svr_chr_access","file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false,"digest":{"function_hash":"97570995413996262338588027328006426387","length":2248},"id":"CVE-2026-25507-68be86f6","signature_type":"Function"},{"id":"CVE-2026-25507-6c6d53a6","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false,"digest":{"function_hash":"29663101477782023129658245969149268064","length":123}},{"id":"CVE-2026-25507-6ca4718f","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/simple_ble/simple_ble.c"},"deprecated":false,"digest":{"line_hashes":["129078140690607790749198924569011334176","199581936983540637692126127835523833381","91631558435105343467688749871166820691","323394612513589572750391777960115032333","251510484522902961588729127448224250934","83172832641155593798515671104347638858","161839469816953246151106074888481895376","282640728012947479507158025602305684770","178073666982278187269795354137723816545","51892339148938617988896778914888588993","283027268611506529445207696372215237263"],"threshold":0.9}},{"source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/simple_ble/simple_ble.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["21378149387348444712870074521680112632","152625781465593429671681918063545965789","236000702885165517364605329453060666273","133065752810075120727216215306936757451","89378130330309579133929290092892803597","27408393792113586493953809787867927713"]},"id":"CVE-2026-25507-6d5637e2","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/simple_ble/simple_ble.h"},"deprecated":false,"digest":{"line_hashes":["152625781465593429671681918063545965789","236000702885165517364605329453060666273","133065752810075120727216215306936757451","89378130330309579133929290092892803597","27408393792113586493953809787867927713"],"threshold":0.9},"id":"CVE-2026-25507-6d78c1e8","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2026-25507-6e4b5358","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_stop"},"deprecated":false,"digest":{"length":650,"function_hash":"284936264160764206896614385607726257107"}},{"deprecated":false,"digest":{"length":1165,"function_hash":"252852174837927050436042974481345170084"},"id":"CVE-2026-25507-76698cc6","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_disconnect"}},{"deprecated":false,"digest":{"function_hash":"325787697391706651632886409764734061468","length":691},"id":"CVE-2026-25507-77807488","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_cleanup"}},{"deprecated":false,"digest":{"line_hashes":["14995544720486937275774499710030464432","281156845558696565371763276525268589323","126641375047763858361145910998321931866","62473897938282535547686015161346783899","156100672753514161061016751509569238140","38984603111101267351480134305415949000","322382760380431200178322535805649536959","315903252159372237838500514873033508191","32720033850564844600880951053237579536","279273384036628430423100607185785054039","190903419842105574475501500775698464944","142717586158111270503823819061807603173","144189770428534875302669861187602610976","93194311289380118336124934858187992031","302017215365287451989701613141899619770","225898782230722386791742901136852980513","230693998704787385367614072333989838005","80166315916574719093926685697368683660","122269716863542909393186175246101033396","230693998704787385367614072333989838005","103485723289278307706768719667829574538","301884057955978051794073525212486723132","92598134377928132239649360454323652087","39699313502254205028906459162406368675","13397558939649396386474486187805786758","41866232512888504942304128357938133406","17376449365540832315957925428087940526","307807303052934585450808173196331905295","172649782484658335594624641698144433658","29174696824622897686174599313683294026","60348303524838200837806915240836162976","205130950075328670660949362543217903963","306998882643252163661099685640581103127","325525173887703431291165741884775863797","256680665047900213289469041958523339653","294986393455524337286040999653781525514","212112096660266839276265631858447557868","85421471902794362595936537186799806452","289623291231414906088777760183928469938","314540119803240203625407961711609831781","207120756591492767955500564449774603776","111688344916544619213706508410688729808","324639382510266819127169904810907270598","90698760234708858641811920697853453880","296848202541553201947183697581057762398","275111386154300975225333664178665769109","127146488309612988117538535159740474241","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25507-7c2f9b55","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c"}},{"deprecated":false,"digest":{"function_hash":"45462595951379773585941786623287409556","length":373},"id":"CVE-2026-25507-7c39772d","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_dsc_access"}},{"digest":{"line_hashes":["14995544720486937275774499710030464432","281156845558696565371763276525268589323","126641375047763858361145910998321931866","62473897938282535547686015161346783899","156100672753514161061016751509569238140","38984603111101267351480134305415949000","322382760380431200178322535805649536959","315903252159372237838500514873033508191","32720033850564844600880951053237579536","279273384036628430423100607185785054039","190903419842105574475501500775698464944","142717586158111270503823819061807603173","144189770428534875302669861187602610976","93194311289380118336124934858187992031","302017215365287451989701613141899619770","225898782230722386791742901136852980513","230693998704787385367614072333989838005","80166315916574719093926685697368683660","122269716863542909393186175246101033396","230693998704787385367614072333989838005","103485723289278307706768719667829574538","301884057955978051794073525212486723132","92598134377928132239649360454323652087","39699313502254205028906459162406368675","13397558939649396386474486187805786758","41866232512888504942304128357938133406","17376449365540832315957925428087940526","307807303052934585450808173196331905295","172649782484658335594624641698144433658","29174696824622897686174599313683294026","60348303524838200837806915240836162976","205130950075328670660949362543217903963","306998882643252163661099685640581103127","325525173887703431291165741884775863797","256680665047900213289469041958523339653","294986393455524337286040999653781525514","212112096660266839276265631858447557868","85421471902794362595936537186799806452","289623291231414906088777760183928469938","314540119803240203625407961711609831781","207120756591492767955500564449774603776","111688344916544619213706508410688729808","324639382510266819127169904810907270598","90698760234708858641811920697853453880","296848202541553201947183697581057762398","275111386154300975225333664178665769109","127146488309612988117538535159740474241","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25507-7ca273bf","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"259771385175438895452569171096745912782","length":990},"id":"CVE-2026-25507-7ef330d4","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_connect"}},{"id":"CVE-2026-25507-8191de22","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"prepare_write_event_env"},"deprecated":false,"digest":{"function_hash":"246071474191416490191291873685275861098","length":2038}},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"prepare_write_event_env"},"deprecated":false,"digest":{"function_hash":"246071474191416490191291873685275861098","length":2038},"id":"CVE-2026-25507-83929df1","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"259771385175438895452569171096745912782","length":990},"id":"CVE-2026-25507-89f102ec","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_connect"}},{"source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false,"digest":{"line_hashes":["14995544720486937275774499710030464432","281156845558696565371763276525268589323","126641375047763858361145910998321931866","62473897938282535547686015161346783899","156100672753514161061016751509569238140","236869822182097671947913059453617233632","141995168454696275635339528129016599677","254214841877067184331616076879465676280","157758147912296961435444943278374260824","38984603111101267351480134305415949000","322382760380431200178322535805649536959","315903252159372237838500514873033508191","32720033850564844600880951053237579536","279273384036628430423100607185785054039","190903419842105574475501500775698464944","142717586158111270503823819061807603173","144189770428534875302669861187602610976","93194311289380118336124934858187992031","302017215365287451989701613141899619770","225898782230722386791742901136852980513","230693998704787385367614072333989838005","80166315916574719093926685697368683660","122269716863542909393186175246101033396","230693998704787385367614072333989838005","103485723289278307706768719667829574538","301884057955978051794073525212486723132","92598134377928132239649360454323652087","39699313502254205028906459162406368675","13397558939649396386474486187805786758","41866232512888504942304128357938133406","317244194327752182728097878254186733083","26978584633754160777577560689935499190","290564003126783802964863135460022012477","17376449365540832315957925428087940526","307807303052934585450808173196331905295","172649782484658335594624641698144433658","29174696824622897686174599313683294026","60348303524838200837806915240836162976","205130950075328670660949362543217903963","306998882643252163661099685640581103127","325525173887703431291165741884775863797","256680665047900213289469041958523339653","246798283590726802912001083736206760991","50520197031508710948810545887463528096","231272143041137437160707085319672213152","23288644252381244891680926030942712387","314540119803240203625407961711609831781","285933844330886021754075661293939809104","235336850875718822200596618404899875078","205308063672049669863790528369528626174","259142076475321563649603459477676133333","275543465635192408518476595658462265385","324639382510266819127169904810907270598","220189664991189490637630175853138998731","42749813068584468022765656708074434424","297464230861028806264540141843722149732","100141813110512949510394868585705141646","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25507-8b681fa3","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2026-25507-8bc8ea55","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false,"digest":{"function_hash":"52800084617639390724813296554893868485","length":133}},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false,"digest":{"line_hashes":["14995544720486937275774499710030464432","281156845558696565371763276525268589323","126641375047763858361145910998321931866","62473897938282535547686015161346783899","156100672753514161061016751509569238140","38984603111101267351480134305415949000","322382760380431200178322535805649536959","315903252159372237838500514873033508191","32720033850564844600880951053237579536","279273384036628430423100607185785054039","190903419842105574475501500775698464944","142717586158111270503823819061807603173","144189770428534875302669861187602610976","93194311289380118336124934858187992031","302017215365287451989701613141899619770","225898782230722386791742901136852980513","230693998704787385367614072333989838005","80166315916574719093926685697368683660","122269716863542909393186175246101033396","230693998704787385367614072333989838005","103485723289278307706768719667829574538","301884057955978051794073525212486723132","92598134377928132239649360454323652087","39699313502254205028906459162406368675","13397558939649396386474486187805786758","41866232512888504942304128357938133406","17376449365540832315957925428087940526","307807303052934585450808173196331905295","172649782484658335594624641698144433658","29174696824622897686174599313683294026","60348303524838200837806915240836162976","205130950075328670660949362543217903963","306998882643252163661099685640581103127","325525173887703431291165741884775863797","256680665047900213289469041958523339653","294986393455524337286040999653781525514","212112096660266839276265631858447557868","85421471902794362595936537186799806452","289623291231414906088777760183928469938","314540119803240203625407961711609831781","207120756591492767955500564449774603776","111688344916544619213706508410688729808","324639382510266819127169904810907270598","90698760234708858641811920697853453880","296848202541553201947183697581057762398","275111386154300975225333664178665769109","127146488309612988117538535159740474241","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25507-8be8cf66","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"137977890203657838024463867444851577239","length":1090},"id":"CVE-2026-25507-8c435674","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"function":"transport_simple_ble_disconnect","file":"components/protocomm/src/transports/protocomm_ble.c"}},{"id":"CVE-2026-25507-8c97fc83","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_disconnect"},"deprecated":false,"digest":{"function_hash":"252852174837927050436042974481345170084","length":1165}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false,"digest":{"function_hash":"29663101477782023129658245969149268064","length":123},"id":"CVE-2026-25507-8cb29fb0"},{"source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_connect"},"deprecated":false,"digest":{"function_hash":"265092944354878825703380833765338138336","length":1044},"id":"CVE-2026-25507-8f80654f","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":691,"function_hash":"325787697391706651632886409764734061468"},"id":"CVE-2026-25507-8fd65574","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_cleanup"}},{"id":"CVE-2026-25507-9013134f","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_cleanup"},"deprecated":false,"digest":{"length":691,"function_hash":"325787697391706651632886409764734061468"}},{"source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_ble.c"},"deprecated":false,"digest":{"line_hashes":["257710264239704648227060232753346472612","329764188385261334565992717220351168316","120170865655081233682433304943533894427","32393058709236010179031793725661346622","21370391142885345095148611871644375611","97825778069687380037534977532010009802","246508871972459452726291885168072807557","281006511243982490344942443086886345087","244807548812852247264822494116682379642","58633829289552352613329210069842326384","261743385782775486851058475146143128234","260336413357353524056592476100375830586","6403994011351223087011048287023730918","177912674532721776956925475705211198728","318701918645424790588459160778805306676","101282999868686696806129532337943833204","285323255698958326450143928637599192282","260849133137630298758053022077191640656","259283405024063495438217518167157745266","211171762541864366821440965914535360712","221639113771852350065397501325224551592","164798815645570053988166372618537775337","258272738451812475861075652189910684284","48771159233669945975554797462733047346","40904896292973127358064133725647846","230693998704787385367614072333989838005","80166315916574719093926685697368683660","132245061728982872117091873350343975631","256569740479023789542707559100443732236","310782953103250125739886682930339281661","133763774347138115511292481038125693521","40904896292973127358064133725647846","230693998704787385367614072333989838005","103485723289278307706768719667829574538","87833027963148101384350870641982731386","133360392153856581929072633477251683360","170002391055020272968536153207288763445","186349025901675348896286860913784273159","338407048549300573683197613038948592792","241401798012532152388774189880585612580","190739601565344670200017528739349133085","121054594478200758090319324772495912393","24032427381127620851219797410527550641","61317576666999109176700232866034832349","252108714120504479691760312162722685385","45182758668270968110375149399302495827","29174696824622897686174599313683294026","33767420788268105640751016783522760772","253179518615540642366295748549525298510","36399169746633953973444720281940617483","126744274385603041662427707913519049681","176309035702742730672763291313291532739","79951578423774237636867445848485060455","271952480959408333370951241425238275695","208276206156888990735625202316702798628","284787200966007752833796429188004748861","332478570617641557769369082302790746094","208939754611489517550267289680481607442","53800392318657248124442643839055904693","86677704636607069303982909698592973070","195995100685626679922398767614059534385","338399132429815480241577549995444436226","127146488309612988117538535159740474241","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25507-91382fb6","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_cleanup"},"deprecated":false,"digest":{"function_hash":"325787697391706651632886409764734061468","length":691},"id":"CVE-2026-25507-9419b59e","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["257710264239704648227060232753346472612","329764188385261334565992717220351168316","120170865655081233682433304943533894427","32393058709236010179031793725661346622","21370391142885345095148611871644375611","97825778069687380037534977532010009802","246508871972459452726291885168072807557","281006511243982490344942443086886345087","244807548812852247264822494116682379642","58633829289552352613329210069842326384","261743385782775486851058475146143128234","260336413357353524056592476100375830586","6403994011351223087011048287023730918","177912674532721776956925475705211198728","318701918645424790588459160778805306676","101282999868686696806129532337943833204","285323255698958326450143928637599192282","260849133137630298758053022077191640656","259283405024063495438217518167157745266","211171762541864366821440965914535360712","221639113771852350065397501325224551592","116965301512959357285961195660163724577","328557855233430996665040222619231622341","300562617480593172536952913037424856968","164798815645570053988166372618537775337","258272738451812475861075652189910684284","48771159233669945975554797462733047346","40904896292973127358064133725647846","230693998704787385367614072333989838005","80166315916574719093926685697368683660","132245061728982872117091873350343975631","256569740479023789542707559100443732236","310782953103250125739886682930339281661","133763774347138115511292481038125693521","40904896292973127358064133725647846","230693998704787385367614072333989838005","103485723289278307706768719667829574538","87833027963148101384350870641982731386","133360392153856581929072633477251683360","170002391055020272968536153207288763445","186349025901675348896286860913784273159","338407048549300573683197613038948592792","241401798012532152388774189880585612580","190739601565344670200017528739349133085","121054594478200758090319324772495912393","24032427381127620851219797410527550641","1607587221917510676949498437119421598","251228176731292428129831321819074086122","104414682028185540061533032255749974548","61317576666999109176700232866034832349","252108714120504479691760312162722685385","45182758668270968110375149399302495827","29174696824622897686174599313683294026","296527540201909041392749463929930676993","165285451311214586206799876272560986142","165137778531504994716004771240476085421","301702447840036816887543860635180887757","79951578423774237636867445848485060455","271952480959408333370951241425238275695","208276206156888990735625202316702798628","284787200966007752833796429188004748861","197162619818149378243036155725851501758","164809818845664916219060741039574873025","48208582180861149522199007990478004153","85963354425167730939075044251024139352","247167436728612792580530030972844083652","53800392318657248124442643839055904693","183703022832257531494003559932363281481","120159778013182085180317695603820128453","25308624880274732059097199507510744640","298603250738959558840975376529198660865","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25507-96fdd0dd","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_disconnect"},"deprecated":false,"digest":{"function_hash":"137977890203657838024463867444851577239","length":1090},"id":"CVE-2026-25507-98e5e551"},{"digest":{"function_hash":"97570995413996262338588027328006426387","length":2248},"id":"CVE-2026-25507-9c720e45","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_chr_access"},"deprecated":false},{"target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_write"},"deprecated":false,"digest":{"function_hash":"66030955795817474467566410532838072500","length":1272},"id":"CVE-2026-25507-9fbb4fae","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf"},{"digest":{"function_hash":"185066475565834699703649049016163648732","length":499},"id":"CVE-2026-25507-a2e2d9f4","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"uuid128_to_handler"},"deprecated":false},{"target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_disconnect"},"deprecated":false,"digest":{"function_hash":"252852174837927050436042974481345170084","length":1165},"id":"CVE-2026-25507-a353ebc5","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70"},{"deprecated":false,"digest":{"function_hash":"159964077914903168610949221589574897068","length":369},"id":"CVE-2026-25507-a41c268b","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"handle_to_handler"}},{"digest":{"function_hash":"265092944354878825703380833765338138336","length":1044},"id":"CVE-2026-25507-a41ec785","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"function":"transport_simple_ble_connect","file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false},{"target":{"function":"protocomm_ble_stop","file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false,"digest":{"function_hash":"167022205343871210898130668753455260858","length":818},"id":"CVE-2026-25507-a483617a","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_connect"},"deprecated":false,"digest":{"function_hash":"259771385175438895452569171096745912782","length":990},"id":"CVE-2026-25507-a8f14917","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"252852174837927050436042974481345170084","length":1165},"id":"CVE-2026-25507-a973ec57","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"function":"transport_simple_ble_disconnect","file":"components/protocomm/src/transports/protocomm_nimble.c"}},{"deprecated":false,"digest":{"function_hash":"246071474191416490191291873685275861098","length":2038},"id":"CVE-2026-25507-ab8bf51e","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"prepare_write_event_env"}},{"source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/simple_ble/simple_ble.c"},"deprecated":false,"digest":{"line_hashes":["315096193931674132959326456275400050276","251510484522902961588729127448224250934","83172832641155593798515671104347638858","161839469816953246151106074888481895376"],"threshold":0.9},"id":"CVE-2026-25507-ac2ecfc3","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2026-25507-af4a6ced","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false,"digest":{"function_hash":"29663101477782023129658245969149268064","length":123}},{"target":{"function":"protocomm_ble_start","file":"components/protocomm/src/transports/protocomm_ble.c"},"deprecated":false,"digest":{"length":3804,"function_hash":"329306190190962484664580386318247843807"},"id":"CVE-2026-25507-b2861334","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663"},{"source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_ble.c"},"deprecated":false,"digest":{"line_hashes":["257710264239704648227060232753346472612","329764188385261334565992717220351168316","120170865655081233682433304943533894427","32393058709236010179031793725661346622","21370391142885345095148611871644375611","97825778069687380037534977532010009802","246508871972459452726291885168072807557","281006511243982490344942443086886345087","244807548812852247264822494116682379642","58633829289552352613329210069842326384","261743385782775486851058475146143128234","260336413357353524056592476100375830586","6403994011351223087011048287023730918","177912674532721776956925475705211198728","318701918645424790588459160778805306676","101282999868686696806129532337943833204","285323255698958326450143928637599192282","260849133137630298758053022077191640656","259283405024063495438217518167157745266","211171762541864366821440965914535360712","221639113771852350065397501325224551592","164798815645570053988166372618537775337","258272738451812475861075652189910684284","48771159233669945975554797462733047346","40904896292973127358064133725647846","230693998704787385367614072333989838005","80166315916574719093926685697368683660","132245061728982872117091873350343975631","256569740479023789542707559100443732236","310782953103250125739886682930339281661","133763774347138115511292481038125693521","40904896292973127358064133725647846","230693998704787385367614072333989838005","103485723289278307706768719667829574538","87833027963148101384350870641982731386","133360392153856581929072633477251683360","170002391055020272968536153207288763445","186349025901675348896286860913784273159","338407048549300573683197613038948592792","241401798012532152388774189880585612580","190739601565344670200017528739349133085","121054594478200758090319324772495912393","24032427381127620851219797410527550641","61317576666999109176700232866034832349","252108714120504479691760312162722685385","45182758668270968110375149399302495827","29174696824622897686174599313683294026","33767420788268105640751016783522760772","253179518615540642366295748549525298510","36399169746633953973444720281940617483","126744274385603041662427707913519049681","176309035702742730672763291313291532739","79951578423774237636867445848485060455","271952480959408333370951241425238275695","208276206156888990735625202316702798628","284787200966007752833796429188004748861","332478570617641557769369082302790746094","208939754611489517550267289680481607442","53800392318657248124442643839055904693","86677704636607069303982909698592973070","195995100685626679922398767614059534385","338399132429815480241577549995444436226","127146488309612988117538535159740474241","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25507-b5182cb2","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"length":123,"function_hash":"29663101477782023129658245969149268064"},"id":"CVE-2026-25507-b71fc94d","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_set_mtu"}},{"deprecated":false,"digest":{"function_hash":"329306190190962484664580386318247843807","length":3804},"id":"CVE-2026-25507-bb4f601e","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_start"}},{"source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_stop"},"deprecated":false,"digest":{"function_hash":"25331609710130255005843060589479922153","length":571},"id":"CVE-2026-25507-be421270","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-25507-c135a4a4","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/include/transports/protocomm_ble.h"},"deprecated":false,"digest":{"line_hashes":["37132769335001316011630232488543223298","141995168454696275635339528129016599677","330138740435034522905652976341116148202","159614267102962228647958864165286888042"],"threshold":0.9}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false,"digest":{"function_hash":"29663101477782023129658245969149268064","length":123},"id":"CVE-2026-25507-c1c5e99c"},{"target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_connect"},"deprecated":false,"digest":{"function_hash":"265092944354878825703380833765338138336","length":1044},"id":"CVE-2026-25507-c2b26606","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70"},{"deprecated":false,"digest":{"function_hash":"325787697391706651632886409764734061468","length":691},"id":"CVE-2026-25507-c4d467ea","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_cleanup"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["14995544720486937275774499710030464432","221968878736916771240557810339805249367","57521880083523039665018450357729796334","62473897938282535547686015161346783899","156100672753514161061016751509569238140","236869822182097671947913059453617233632","154140376263394333444114814710497000062","328032751545377748258717892065275430084","295281356191233686076819427776143284739","38984603111101267351480134305415949000","322382760380431200178322535805649536959","315903252159372237838500514873033508191","32720033850564844600880951053237579536","279273384036628430423100607185785054039","190903419842105574475501500775698464944","142717586158111270503823819061807603173","144189770428534875302669861187602610976","93194311289380118336124934858187992031","302017215365287451989701613141899619770","225898782230722386791742901136852980513","230693998704787385367614072333989838005","80166315916574719093926685697368683660","122269716863542909393186175246101033396","230693998704787385367614072333989838005","103485723289278307706768719667829574538","301884057955978051794073525212486723132","92598134377928132239649360454323652087","39699313502254205028906459162406368675","13397558939649396386474486187805786758","41866232512888504942304128357938133406","317244194327752182728097878254186733083","26978584633754160777577560689935499190","290564003126783802964863135460022012477","17376449365540832315957925428087940526","307807303052934585450808173196331905295","172649782484658335594624641698144433658","29174696824622897686174599313683294026","60348303524838200837806915240836162976","205130950075328670660949362543217903963","306998882643252163661099685640581103127","325525173887703431291165741884775863797","256680665047900213289469041958523339653","246798283590726802912001083736206760991","50520197031508710948810545887463528096","231272143041137437160707085319672213152","23288644252381244891680926030942712387","314540119803240203625407961711609831781","285933844330886021754075661293939809104","235336850875718822200596618404899875078","205308063672049669863790528369528626174","259142076475321563649603459477676133333","275543465635192408518476595658462265385","324639382510266819127169904810907270598","220189664991189490637630175853138998731","42749813068584468022765656708074434424","297464230861028806264540141843722149732","100141813110512949510394868585705141646","24235370764360687857257125087792762465","139864388247591628080775434177188534175"]},"id":"CVE-2026-25507-c7e2ffc6","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c"}},{"deprecated":false,"digest":{"line_hashes":["257710264239704648227060232753346472612","329764188385261334565992717220351168316","120170865655081233682433304943533894427","32393058709236010179031793725661346622","21370391142885345095148611871644375611","97825778069687380037534977532010009802","246508871972459452726291885168072807557","281006511243982490344942443086886345087","244807548812852247264822494116682379642","58633829289552352613329210069842326384","261743385782775486851058475146143128234","260336413357353524056592476100375830586","6403994011351223087011048287023730918","177912674532721776956925475705211198728","318701918645424790588459160778805306676","101282999868686696806129532337943833204","285323255698958326450143928637599192282","260849133137630298758053022077191640656","259283405024063495438217518167157745266","211171762541864366821440965914535360712","221639113771852350065397501325224551592","164798815645570053988166372618537775337","258272738451812475861075652189910684284","48771159233669945975554797462733047346","40904896292973127358064133725647846","230693998704787385367614072333989838005","80166315916574719093926685697368683660","132245061728982872117091873350343975631","256569740479023789542707559100443732236","310782953103250125739886682930339281661","133763774347138115511292481038125693521","40904896292973127358064133725647846","230693998704787385367614072333989838005","103485723289278307706768719667829574538","87833027963148101384350870641982731386","133360392153856581929072633477251683360","170002391055020272968536153207288763445","186349025901675348896286860913784273159","338407048549300573683197613038948592792","241401798012532152388774189880585612580","190739601565344670200017528739349133085","121054594478200758090319324772495912393","24032427381127620851219797410527550641","1607587221917510676949498437119421598","251228176731292428129831321819074086122","104414682028185540061533032255749974548","61317576666999109176700232866034832349","252108714120504479691760312162722685385","45182758668270968110375149399302495827","29174696824622897686174599313683294026","296527540201909041392749463929930676993","165285451311214586206799876272560986142","165137778531504994716004771240476085421","301702447840036816887543860635180887757","79951578423774237636867445848485060455","271952480959408333370951241425238275695","208276206156888990735625202316702798628","284787200966007752833796429188004748861","197162619818149378243036155725851501758","164809818845664916219060741039574873025","48208582180861149522199007990478004153","85963354425167730939075044251024139352","247167436728612792580530030972844083652","53800392318657248124442643839055904693","183703022832257531494003559932363281481","120159778013182085180317695603820128453","25308624880274732059097199507510744640","298603250738959558840975376529198660865","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25507-cb9ef266","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_ble.c"}},{"id":"CVE-2026-25507-cd7e621b","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_exec_write"},"deprecated":false,"digest":{"function_hash":"302502728169829495849238234762842032783","length":1193}},{"target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_exec_write"},"deprecated":false,"digest":{"function_hash":"302502728169829495849238234762842032783","length":1193},"id":"CVE-2026-25507-cf34c29e","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6"},{"source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"function":"transport_simple_ble_disconnect","file":"components/protocomm/src/transports/protocomm_ble.c"},"deprecated":false,"digest":{"function_hash":"137977890203657838024463867444851577239","length":1090},"id":"CVE-2026-25507-d4832d16","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-25507-d9cd3e9a","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"function":"transport_simple_ble_disconnect","file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false,"digest":{"function_hash":"252852174837927050436042974481345170084","length":1165}},{"target":{"file":"components/protocomm/src/transports/protocomm_ble.c"},"deprecated":false,"digest":{"line_hashes":["257710264239704648227060232753346472612","329764188385261334565992717220351168316","120170865655081233682433304943533894427","32393058709236010179031793725661346622","21370391142885345095148611871644375611","97825778069687380037534977532010009802","246508871972459452726291885168072807557","281006511243982490344942443086886345087","244807548812852247264822494116682379642","58633829289552352613329210069842326384","261743385782775486851058475146143128234","260336413357353524056592476100375830586","6403994011351223087011048287023730918","177912674532721776956925475705211198728","318701918645424790588459160778805306676","101282999868686696806129532337943833204","285323255698958326450143928637599192282","260849133137630298758053022077191640656","259283405024063495438217518167157745266","211171762541864366821440965914535360712","221639113771852350065397501325224551592","164798815645570053988166372618537775337","258272738451812475861075652189910684284","48771159233669945975554797462733047346","40904896292973127358064133725647846","230693998704787385367614072333989838005","80166315916574719093926685697368683660","132245061728982872117091873350343975631","256569740479023789542707559100443732236","310782953103250125739886682930339281661","133763774347138115511292481038125693521","40904896292973127358064133725647846","230693998704787385367614072333989838005","103485723289278307706768719667829574538","87833027963148101384350870641982731386","133360392153856581929072633477251683360","170002391055020272968536153207288763445","186349025901675348896286860913784273159","338407048549300573683197613038948592792","241401798012532152388774189880585612580","190739601565344670200017528739349133085","121054594478200758090319324772495912393","24032427381127620851219797410527550641","61317576666999109176700232866034832349","252108714120504479691760312162722685385","45182758668270968110375149399302495827","29174696824622897686174599313683294026","33767420788268105640751016783522760772","253179518615540642366295748549525298510","36399169746633953973444720281940617483","126744274385603041662427707913519049681","176309035702742730672763291313291532739","79951578423774237636867445848485060455","271952480959408333370951241425238275695","208276206156888990735625202316702798628","284787200966007752833796429188004748861","332478570617641557769369082302790746094","208939754611489517550267289680481607442","53800392318657248124442643839055904693","86677704636607069303982909698592973070","195995100685626679922398767614059534385","338399132429815480241577549995444436226","127146488309612988117538535159740474241","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25507-db9f67e4","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9"},{"deprecated":false,"digest":{"line_hashes":["141995168454696275635339528129016599677","330138740435034522905652976341116148202","159614267102962228647958864165286888042"],"threshold":0.9},"id":"CVE-2026-25507-dbaf5540","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/include/transports/protocomm_ble.h"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_dsc_access"},"deprecated":false,"digest":{"function_hash":"45462595951379773585941786623287409556","length":373},"id":"CVE-2026-25507-dc678af1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_stop"},"deprecated":false,"digest":{"length":571,"function_hash":"25331609710130255005843060589479922153"},"id":"CVE-2026-25507-dcdb30d3"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"function":"protocomm_ble_stop","file":"components/protocomm/src/transports/protocomm_ble.c"},"deprecated":false,"digest":{"function_hash":"284936264160764206896614385607726257107","length":650},"id":"CVE-2026-25507-df1e5b6e"},{"deprecated":false,"digest":{"function_hash":"137977890203657838024463867444851577239","length":1090},"id":"CVE-2026-25507-e0a2dabc","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_disconnect"}},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_dsc_access"},"deprecated":false,"digest":{"function_hash":"45462595951379773585941786623287409556","length":373},"id":"CVE-2026-25507-e21815d0","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_exec_write"},"deprecated":false,"digest":{"function_hash":"302502728169829495849238234762842032783","length":1193},"id":"CVE-2026-25507-e686c5d3"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"uuid128_to_handler"},"deprecated":false,"digest":{"function_hash":"185066475565834699703649049016163648732","length":499},"id":"CVE-2026-25507-e6f04077"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_write"},"deprecated":false,"digest":{"function_hash":"66030955795817474467566410532838072500","length":1272},"id":"CVE-2026-25507-e8b34ffb","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_exec_write"},"deprecated":false,"digest":{"function_hash":"302502728169829495849238234762842032783","length":1193},"id":"CVE-2026-25507-e951c9a8","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"function":"transport_simple_ble_write","file":"components/protocomm/src/transports/protocomm_ble.c"},"deprecated":false,"digest":{"function_hash":"66030955795817474467566410532838072500","length":1272},"id":"CVE-2026-25507-e967f83e","signature_type":"Function"},{"digest":{"function_hash":"175949270531941533956132385938030403612","length":913},"id":"CVE-2026-25507-ee1f27f4","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"protocomm_ble_stop"},"deprecated":false},{"source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_connect"},"deprecated":false,"digest":{"length":1044,"function_hash":"265092944354878825703380833765338138336"},"id":"CVE-2026-25507-ee5787ff","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_connect"},"deprecated":false,"digest":{"function_hash":"265092944354878825703380833765338138336","length":1044},"id":"CVE-2026-25507-ef2fc5ca","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"167022205343871210898130668753455260858","length":818},"id":"CVE-2026-25507-ef4aa9b6","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"protocomm_ble_stop"}},{"digest":{"function_hash":"63200799082803172625061943333402630734","length":1305},"id":"CVE-2026-25507-efc746e1","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_read"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"137977890203657838024463867444851577239","length":1090},"id":"CVE-2026-25507-f213cfb1","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_disconnect"}},{"source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false,"digest":{"function_hash":"29663101477782023129658245969149268064","length":123},"id":"CVE-2026-25507-f22a55cb","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":1193,"function_hash":"302502728169829495849238234762842032783"},"id":"CVE-2026-25507-f35c9445","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_exec_write"}},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false,"digest":{"function_hash":"52800084617639390724813296554893868485","length":133},"id":"CVE-2026-25507-f3d18916","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_start"},"deprecated":false,"digest":{"function_hash":"294311160157959374696287409137008190556","length":3748},"id":"CVE-2026-25507-f4e857b4","signature_type":"Function"},{"digest":{"function_hash":"25331609710130255005843060589479922153","length":571},"id":"CVE-2026-25507-f6b1e518","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_stop"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"handle_to_handler"},"deprecated":false,"digest":{"function_hash":"159964077914903168610949221589574897068","length":369},"id":"CVE-2026-25507-f7e1287a","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"302502728169829495849238234762842032783","length":1193},"id":"CVE-2026-25507-f82e364d","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_exec_write"}},{"target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_write"},"deprecated":false,"digest":{"function_hash":"66030955795817474467566410532838072500","length":1272},"id":"CVE-2026-25507-f93c1a1a","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70"},{"source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"uuid128_to_handler"},"deprecated":false,"digest":{"length":499,"function_hash":"185066475565834699703649049016163648732"},"id":"CVE-2026-25507-fd9ade78","signature_type":"Function","signature_version":"v1"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H"}]}