{"id":"CVE-2026-25508","summary":"ESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning","details":"ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, an out-of-bounds read vulnerability was reported in the BLE ATT Prepare Write handling of the BLE provisioning transport (protocomm_ble). The issue can be triggered by a remote BLE client while the device is in provisioning mode. The transport accumulated prepared-write fragments in a fixed-size buffer but incorrectly tracked the cumulative length. By sending repeated prepare write requests with overlapping offsets, a remote client could cause the reported length to exceed the allocated buffer size. This inflated length was then passed to provisioning handlers during execute-write processing, resulting in an out-of-bounds read and potential memory corruption. This issue has been patched in versions 5.5.3, 5.4.4, 5.3.5, 5.2.7, and 5.1.7.","aliases":["GHSA-9j5x-rf36-54x9"],"modified":"2026-08-12T15:31:54.162640Z","published":"2026-02-04T17:58:28.502Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-125"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25508.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25508.json"},{"type":"ADVISORY","url":"https://github.com/espressif/esp-idf/security/advisories/GHSA-9j5x-rf36-54x9"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25508"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/espressif/esp-idf","events":[{"introduced":"7452b1cb1d22cd1b439a6a922548efacea98ee72"},{"fixed":"0540c85140c2c06c0cbecc8843277ea676d5c4a9"},{"fixed":"1ff264abf2504cade46f0ce3a03f821310bcf6d7"},{"fixed":"47552ff4fd824caf38215468ebd2f31fb5f36d70"},{"fixed":"4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6"},{"fixed":"894c28afe3f2f8f31ff25b64191883517dddb5cf"},{"fixed":"cde7b7362adc15638c141c249681cbe5d23de663"},{"fixed":"dba9a7dc01e4dab14c77d328f6a6f46369aeee63"}],"database_specific":{"cpe":["cpe:2.3:a:espressif:esp-idf:5.1.6:*:*:*:*:*:*:*","cpe:2.3:a:espressif:esp-idf:5.2.6:*:*:*:*:*:*:*","cpe:2.3:a:espressif:esp-idf:5.3.4:*:*:*:*:*:*:*","cpe:2.3:a:espressif:esp-idf:5.4.3:*:*:*:*:*:*:*","cpe:2.3:a:espressif:esp-idf:5.5.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.1.6"},{"last_affected":"5.1.6"},{"introduced":"5.2.6"},{"last_affected":"5.2.6"},{"introduced":"5.3.4"},{"last_affected":"5.3.4"},{"introduced":"5.4.3"},{"last_affected":"5.4.3"},{"introduced":"5.5.2"},{"last_affected":"5.5.2"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["5.1.6","5.2.6","5.3.4","5.4.3","5.5.2","= 5.1.6","= 5.2.6","= 5.3.4","= 5.4.3","= 5.5.2"],"database_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"63200799082803172625061943333402630734","length":1305},"id":"CVE-2026-25508-00a1ac34","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_read"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_connect"},"deprecated":false,"digest":{"function_hash":"259771385175438895452569171096745912782","length":990},"id":"CVE-2026-25508-020cdb06"},{"target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false,"digest":{"function_hash":"52800084617639390724813296554893868485","length":133},"id":"CVE-2026-25508-0291d521","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9"},{"deprecated":false,"digest":{"function_hash":"185066475565834699703649049016163648732","length":499},"id":"CVE-2026-25508-055153a5","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"function":"uuid128_to_handler","file":"components/protocomm/src/transports/protocomm_nimble.c"}},{"deprecated":false,"digest":{"function_hash":"45462595951379773585941786623287409556","length":373},"id":"CVE-2026-25508-06053402","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_dsc_access"}},{"source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_chr_access"},"deprecated":false,"digest":{"function_hash":"97570995413996262338588027328006426387","length":2248},"id":"CVE-2026-25508-07066023","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_cleanup"},"deprecated":false,"digest":{"function_hash":"325787697391706651632886409764734061468","length":691},"id":"CVE-2026-25508-07ee25cf","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"52800084617639390724813296554893868485","length":133},"id":"CVE-2026-25508-09e76b5b","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_set_mtu"}},{"digest":{"function_hash":"7710572293241587155673302250622560351","length":3842},"id":"CVE-2026-25508-0a9bf2a7","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"protocomm_ble_start"},"deprecated":false},{"digest":{"function_hash":"63200799082803172625061943333402630734","length":1305},"id":"CVE-2026-25508-0b728330","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_read"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"handle_to_handler"},"deprecated":false,"digest":{"function_hash":"159964077914903168610949221589574897068","length":369},"id":"CVE-2026-25508-0b94bb8f","signature_type":"Function"},{"digest":{"function_hash":"265092944354878825703380833765338138336","length":1044},"id":"CVE-2026-25508-0bec9530","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_connect"},"deprecated":false},{"source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_read"},"deprecated":false,"digest":{"function_hash":"63200799082803172625061943333402630734","length":1305},"id":"CVE-2026-25508-0e0bf1fd","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"259771385175438895452569171096745912782","length":990},"id":"CVE-2026-25508-0eed2a27","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_connect"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/simple_ble/simple_ble.c"},"deprecated":false,"digest":{"line_hashes":["315096193931674132959326456275400050276","251510484522902961588729127448224250934","83172832641155593798515671104347638858","161839469816953246151106074888481895376"],"threshold":0.9},"id":"CVE-2026-25508-120a7d65"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"uuid128_to_handler"},"deprecated":false,"digest":{"function_hash":"185066475565834699703649049016163648732","length":499},"id":"CVE-2026-25508-1506cc3c"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_read"},"deprecated":false,"digest":{"length":1305,"function_hash":"63200799082803172625061943333402630734"},"id":"CVE-2026-25508-15098625","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"159964077914903168610949221589574897068","length":369},"id":"CVE-2026-25508-152e2649","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"handle_to_handler"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"uuid128_to_handler"},"deprecated":false,"digest":{"function_hash":"185066475565834699703649049016163648732","length":499},"id":"CVE-2026-25508-1711d50c"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"protocomm_ble_stop"},"deprecated":false,"digest":{"function_hash":"175949270531941533956132385938030403612","length":913},"id":"CVE-2026-25508-17279cb2","signature_type":"Function"},{"digest":{"function_hash":"97570995413996262338588027328006426387","length":2248},"id":"CVE-2026-25508-1d36e81a","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_chr_access"},"deprecated":false},{"id":"CVE-2026-25508-1d66f76a","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/simple_ble/simple_ble.h"},"deprecated":false,"digest":{"line_hashes":["21378149387348444712870074521680112632","152625781465593429671681918063545965789","236000702885165517364605329453060666273","133065752810075120727216215306936757451","89378130330309579133929290092892803597","27408393792113586493953809787867927713"],"threshold":0.9}},{"target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_exec_write"},"deprecated":false,"digest":{"function_hash":"302502728169829495849238234762842032783","length":1193},"id":"CVE-2026-25508-1dfb4026","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7"},{"id":"CVE-2026-25508-1f1f495d","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false,"digest":{"line_hashes":["14995544720486937275774499710030464432","281156845558696565371763276525268589323","126641375047763858361145910998321931866","62473897938282535547686015161346783899","156100672753514161061016751509569238140","38984603111101267351480134305415949000","322382760380431200178322535805649536959","315903252159372237838500514873033508191","32720033850564844600880951053237579536","279273384036628430423100607185785054039","190903419842105574475501500775698464944","142717586158111270503823819061807603173","144189770428534875302669861187602610976","93194311289380118336124934858187992031","302017215365287451989701613141899619770","225898782230722386791742901136852980513","230693998704787385367614072333989838005","80166315916574719093926685697368683660","122269716863542909393186175246101033396","230693998704787385367614072333989838005","103485723289278307706768719667829574538","301884057955978051794073525212486723132","92598134377928132239649360454323652087","39699313502254205028906459162406368675","13397558939649396386474486187805786758","41866232512888504942304128357938133406","17376449365540832315957925428087940526","307807303052934585450808173196331905295","172649782484658335594624641698144433658","29174696824622897686174599313683294026","60348303524838200837806915240836162976","205130950075328670660949362543217903963","306998882643252163661099685640581103127","325525173887703431291165741884775863797","256680665047900213289469041958523339653","246798283590726802912001083736206760991","50520197031508710948810545887463528096","231272143041137437160707085319672213152","23288644252381244891680926030942712387","10043714531096977963924683688079767543","44316419598897803009350219757313110328","289623291231414906088777760183928469938","314540119803240203625407961711609831781","285933844330886021754075661293939809104","235336850875718822200596618404899875078","205308063672049669863790528369528626174","259142076475321563649603459477676133333","275543465635192408518476595658462265385","324639382510266819127169904810907270598","220189664991189490637630175853138998731","42749813068584468022765656708074434424","297464230861028806264540141843722149732","100141813110512949510394868585705141646","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9}},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_disconnect"},"deprecated":false,"digest":{"function_hash":"252852174837927050436042974481345170084","length":1165},"id":"CVE-2026-25508-2528b9b7","signature_type":"Function"},{"source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_connect"},"deprecated":false,"digest":{"function_hash":"259771385175438895452569171096745912782","length":990},"id":"CVE-2026-25508-26474474","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"66030955795817474467566410532838072500","length":1272},"id":"CVE-2026-25508-268b5008","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_write"}},{"target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_read"},"deprecated":false,"digest":{"function_hash":"63200799082803172625061943333402630734","length":1305},"id":"CVE-2026-25508-26ad4f50","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"protocomm_ble_stop"},"deprecated":false,"digest":{"function_hash":"167022205343871210898130668753455260858","length":818},"id":"CVE-2026-25508-28105d74"},{"id":"CVE-2026-25508-2963287b","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false,"digest":{"function_hash":"29663101477782023129658245969149268064","length":123}},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_chr_access"},"deprecated":false,"digest":{"function_hash":"97570995413996262338588027328006426387","length":2248},"id":"CVE-2026-25508-2ad49af8","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"325787697391706651632886409764734061468","length":691},"id":"CVE-2026-25508-2e340b89","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"function":"protocomm_ble_cleanup","file":"components/protocomm/src/transports/protocomm_ble.c"}},{"target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_disconnect"},"deprecated":false,"digest":{"length":1165,"function_hash":"252852174837927050436042974481345170084"},"id":"CVE-2026-25508-2e6b9f6b","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63"},{"target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"protocomm_ble_stop"},"deprecated":false,"digest":{"function_hash":"175949270531941533956132385938030403612","length":913},"id":"CVE-2026-25508-2e89d673","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63"},{"deprecated":false,"digest":{"function_hash":"25331609710130255005843060589479922153","length":571},"id":"CVE-2026-25508-2f7dae77","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_stop"}},{"deprecated":false,"digest":{"function_hash":"259771385175438895452569171096745912782","length":990},"id":"CVE-2026-25508-2f917fda","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"function":"transport_simple_ble_connect","file":"components/protocomm/src/transports/protocomm_ble.c"}},{"source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"protocomm_ble_stop"},"deprecated":false,"digest":{"function_hash":"167022205343871210898130668753455260858","length":818},"id":"CVE-2026-25508-2f92887a","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"function":"gatt_svr_dsc_access","file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false,"digest":{"function_hash":"45462595951379773585941786623287409556","length":373},"id":"CVE-2026-25508-3483eb13"},{"target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_connect"},"deprecated":false,"digest":{"function_hash":"265092944354878825703380833765338138336","length":1044},"id":"CVE-2026-25508-353f5971","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_disconnect"},"deprecated":false,"digest":{"function_hash":"137977890203657838024463867444851577239","length":1090},"id":"CVE-2026-25508-3682ae24"},{"deprecated":false,"digest":{"function_hash":"45462595951379773585941786623287409556","length":373},"id":"CVE-2026-25508-36a36f16","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_dsc_access"}},{"source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c"},"deprecated":false,"digest":{"line_hashes":["257710264239704648227060232753346472612","191272456561381813988499269567325909799","120170865655081233682433304943533894427","32393058709236010179031793725661346622","21370391142885345095148611871644375611","97825778069687380037534977532010009802","246508871972459452726291885168072807557","281006511243982490344942443086886345087","244807548812852247264822494116682379642","58633829289552352613329210069842326384","261743385782775486851058475146143128234","260336413357353524056592476100375830586","6403994011351223087011048287023730918","177912674532721776956925475705211198728","318701918645424790588459160778805306676","101282999868686696806129532337943833204","285323255698958326450143928637599192282","260849133137630298758053022077191640656","259283405024063495438217518167157745266","211171762541864366821440965914535360712","221639113771852350065397501325224551592","116965301512959357285961195660163724577","328557855233430996665040222619231622341","300562617480593172536952913037424856968","164798815645570053988166372618537775337","258272738451812475861075652189910684284","48771159233669945975554797462733047346","40904896292973127358064133725647846","230693998704787385367614072333989838005","80166315916574719093926685697368683660","132245061728982872117091873350343975631","256569740479023789542707559100443732236","310782953103250125739886682930339281661","133763774347138115511292481038125693521","40904896292973127358064133725647846","230693998704787385367614072333989838005","103485723289278307706768719667829574538","87833027963148101384350870641982731386","133360392153856581929072633477251683360","170002391055020272968536153207288763445","186349025901675348896286860913784273159","338407048549300573683197613038948592792","241401798012532152388774189880585612580","190739601565344670200017528739349133085","121054594478200758090319324772495912393","24032427381127620851219797410527550641","1607587221917510676949498437119421598","251228176731292428129831321819074086122","104414682028185540061533032255749974548","61317576666999109176700232866034832349","252108714120504479691760312162722685385","45182758668270968110375149399302495827","29174696824622897686174599313683294026","296527540201909041392749463929930676993","165285451311214586206799876272560986142","165137778531504994716004771240476085421","301702447840036816887543860635180887757","79951578423774237636867445848485060455","271952480959408333370951241425238275695","208276206156888990735625202316702798628","284787200966007752833796429188004748861","197162619818149378243036155725851501758","164809818845664916219060741039574873025","48208582180861149522199007990478004153","85963354425167730939075044251024139352","247167436728612792580530030972844083652","53800392318657248124442643839055904693","183703022832257531494003559932363281481","120159778013182085180317695603820128453","25308624880274732059097199507510744640","298603250738959558840975376529198660865","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25508-37864834","signature_type":"Line","signature_version":"v1"},{"digest":{"line_hashes":["37132769335001316011630232488543223298","236869822182097671947913059453617233632","67001943298285646926996708175618872107","253815258379195207251207737182207068430","102852124467079388079280471334101206016"],"threshold":0.9},"id":"CVE-2026-25508-398d4c41","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/include/transports/protocomm_ble.h"},"deprecated":false},{"source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_read"},"deprecated":false,"digest":{"function_hash":"63200799082803172625061943333402630734","length":1305},"id":"CVE-2026-25508-3ed9966f","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"52800084617639390724813296554893868485","length":133},"id":"CVE-2026-25508-4111da9c","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_set_mtu"}},{"digest":{"line_hashes":["257710264239704648227060232753346472612","329764188385261334565992717220351168316","120170865655081233682433304943533894427","32393058709236010179031793725661346622","21370391142885345095148611871644375611","97825778069687380037534977532010009802","246508871972459452726291885168072807557","281006511243982490344942443086886345087","244807548812852247264822494116682379642","58633829289552352613329210069842326384","261743385782775486851058475146143128234","260336413357353524056592476100375830586","6403994011351223087011048287023730918","177912674532721776956925475705211198728","318701918645424790588459160778805306676","101282999868686696806129532337943833204","285323255698958326450143928637599192282","260849133137630298758053022077191640656","259283405024063495438217518167157745266","211171762541864366821440965914535360712","221639113771852350065397501325224551592","164798815645570053988166372618537775337","258272738451812475861075652189910684284","48771159233669945975554797462733047346","40904896292973127358064133725647846","230693998704787385367614072333989838005","80166315916574719093926685697368683660","132245061728982872117091873350343975631","256569740479023789542707559100443732236","310782953103250125739886682930339281661","133763774347138115511292481038125693521","40904896292973127358064133725647846","230693998704787385367614072333989838005","103485723289278307706768719667829574538","87833027963148101384350870641982731386","133360392153856581929072633477251683360","170002391055020272968536153207288763445","186349025901675348896286860913784273159","338407048549300573683197613038948592792","241401798012532152388774189880585612580","190739601565344670200017528739349133085","121054594478200758090319324772495912393","24032427381127620851219797410527550641","61317576666999109176700232866034832349","252108714120504479691760312162722685385","45182758668270968110375149399302495827","29174696824622897686174599313683294026","33767420788268105640751016783522760772","253179518615540642366295748549525298510","36399169746633953973444720281940617483","126744274385603041662427707913519049681","176309035702742730672763291313291532739","79951578423774237636867445848485060455","271952480959408333370951241425238275695","208276206156888990735625202316702798628","284787200966007752833796429188004748861","332478570617641557769369082302790746094","208939754611489517550267289680481607442","53800392318657248124442643839055904693","86677704636607069303982909698592973070","195995100685626679922398767614059534385","338399132429815480241577549995444436226","127146488309612988117538535159740474241","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25508-4386e309","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_ble.c"},"deprecated":false},{"source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"uuid128_to_handler"},"deprecated":false,"digest":{"function_hash":"185066475565834699703649049016163648732","length":499},"id":"CVE-2026-25508-45bd8a04","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"246071474191416490191291873685275861098","length":2038},"id":"CVE-2026-25508-47121ee0","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"prepare_write_event_env"}},{"id":"CVE-2026-25508-476ca6b4","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"prepare_write_event_env"},"deprecated":false,"digest":{"length":2038,"function_hash":"246071474191416490191291873685275861098"}},{"digest":{"function_hash":"159964077914903168610949221589574897068","length":369},"id":"CVE-2026-25508-48087f47","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"function":"handle_to_handler","file":"components/protocomm/src/transports/protocomm_ble.c"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"66030955795817474467566410532838072500","length":1272},"id":"CVE-2026-25508-4808ce95","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_write"}},{"source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"prepare_write_event_env"},"deprecated":false,"digest":{"function_hash":"246071474191416490191291873685275861098","length":2038},"id":"CVE-2026-25508-4ae2fc20","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"prepare_write_event_env"},"deprecated":false,"digest":{"function_hash":"246071474191416490191291873685275861098","length":2038},"id":"CVE-2026-25508-4d740919","signature_type":"Function","signature_version":"v1"},{"target":{"file":"components/protocomm/src/simple_ble/simple_ble.c","function":"simple_ble_start"},"deprecated":false,"digest":{"length":2352,"function_hash":"289014452143663299104615714689827749914"},"id":"CVE-2026-25508-4e735c38","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663"},{"deprecated":false,"digest":{"function_hash":"97570995413996262338588027328006426387","length":2248},"id":"CVE-2026-25508-55b75150","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"function":"gatt_svr_chr_access","file":"components/protocomm/src/transports/protocomm_nimble.c"}},{"target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false,"digest":{"function_hash":"52800084617639390724813296554893868485","length":133},"id":"CVE-2026-25508-5a957de3","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf"},{"id":"CVE-2026-25508-5d6391cb","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_chr_access"},"deprecated":false,"digest":{"function_hash":"97570995413996262338588027328006426387","length":2248}},{"id":"CVE-2026-25508-5efb979e","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_disconnect"},"deprecated":false,"digest":{"length":1090,"function_hash":"137977890203657838024463867444851577239"}},{"deprecated":false,"digest":{"function_hash":"66030955795817474467566410532838072500","length":1272},"id":"CVE-2026-25508-6176f407","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_write"}},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false,"digest":{"line_hashes":["14995544720486937275774499710030464432","281156845558696565371763276525268589323","126641375047763858361145910998321931866","62473897938282535547686015161346783899","156100672753514161061016751509569238140","38984603111101267351480134305415949000","322382760380431200178322535805649536959","315903252159372237838500514873033508191","32720033850564844600880951053237579536","279273384036628430423100607185785054039","190903419842105574475501500775698464944","142717586158111270503823819061807603173","144189770428534875302669861187602610976","93194311289380118336124934858187992031","302017215365287451989701613141899619770","225898782230722386791742901136852980513","230693998704787385367614072333989838005","80166315916574719093926685697368683660","122269716863542909393186175246101033396","230693998704787385367614072333989838005","103485723289278307706768719667829574538","301884057955978051794073525212486723132","92598134377928132239649360454323652087","39699313502254205028906459162406368675","13397558939649396386474486187805786758","41866232512888504942304128357938133406","17376449365540832315957925428087940526","307807303052934585450808173196331905295","172649782484658335594624641698144433658","29174696824622897686174599313683294026","60348303524838200837806915240836162976","205130950075328670660949362543217903963","306998882643252163661099685640581103127","325525173887703431291165741884775863797","256680665047900213289469041958523339653","294986393455524337286040999653781525514","212112096660266839276265631858447557868","85421471902794362595936537186799806452","289623291231414906088777760183928469938","314540119803240203625407961711609831781","207120756591492767955500564449774603776","111688344916544619213706508410688729808","324639382510266819127169904810907270598","90698760234708858641811920697853453880","296848202541553201947183697581057762398","275111386154300975225333664178665769109","127146488309612988117538535159740474241","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25508-639162a2","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"52800084617639390724813296554893868485","length":133},"id":"CVE-2026-25508-648e38f0","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_set_mtu"}},{"deprecated":false,"digest":{"function_hash":"159964077914903168610949221589574897068","length":369},"id":"CVE-2026-25508-64e1103e","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"handle_to_handler"}},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_dsc_access"},"deprecated":false,"digest":{"function_hash":"45462595951379773585941786623287409556","length":373},"id":"CVE-2026-25508-6506aa8c","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"284936264160764206896614385607726257107","length":650},"id":"CVE-2026-25508-6682b779","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_stop"}},{"id":"CVE-2026-25508-6872ee69","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"handle_to_handler"},"deprecated":false,"digest":{"length":369,"function_hash":"159964077914903168610949221589574897068"}},{"source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_chr_access"},"deprecated":false,"digest":{"function_hash":"97570995413996262338588027328006426387","length":2248},"id":"CVE-2026-25508-68be86f6","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false,"digest":{"function_hash":"29663101477782023129658245969149268064","length":123},"id":"CVE-2026-25508-6c6d53a6","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/simple_ble/simple_ble.c"},"deprecated":false,"digest":{"line_hashes":["129078140690607790749198924569011334176","199581936983540637692126127835523833381","91631558435105343467688749871166820691","323394612513589572750391777960115032333","251510484522902961588729127448224250934","83172832641155593798515671104347638858","161839469816953246151106074888481895376","282640728012947479507158025602305684770","178073666982278187269795354137723816545","51892339148938617988896778914888588993","283027268611506529445207696372215237263"],"threshold":0.9},"id":"CVE-2026-25508-6ca4718f","signature_type":"Line"},{"id":"CVE-2026-25508-6d5637e2","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/simple_ble/simple_ble.h"},"deprecated":false,"digest":{"line_hashes":["21378149387348444712870074521680112632","152625781465593429671681918063545965789","236000702885165517364605329453060666273","133065752810075120727216215306936757451","89378130330309579133929290092892803597","27408393792113586493953809787867927713"],"threshold":0.9}},{"digest":{"line_hashes":["152625781465593429671681918063545965789","236000702885165517364605329453060666273","133065752810075120727216215306936757451","89378130330309579133929290092892803597","27408393792113586493953809787867927713"],"threshold":0.9},"id":"CVE-2026-25508-6d78c1e8","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/simple_ble/simple_ble.h"},"deprecated":false},{"digest":{"function_hash":"284936264160764206896614385607726257107","length":650},"id":"CVE-2026-25508-6e4b5358","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_stop"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_disconnect"},"deprecated":false,"digest":{"function_hash":"252852174837927050436042974481345170084","length":1165},"id":"CVE-2026-25508-76698cc6","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_cleanup"},"deprecated":false,"digest":{"length":691,"function_hash":"325787697391706651632886409764734061468"},"id":"CVE-2026-25508-77807488","signature_type":"Function"},{"digest":{"line_hashes":["14995544720486937275774499710030464432","281156845558696565371763276525268589323","126641375047763858361145910998321931866","62473897938282535547686015161346783899","156100672753514161061016751509569238140","38984603111101267351480134305415949000","322382760380431200178322535805649536959","315903252159372237838500514873033508191","32720033850564844600880951053237579536","279273384036628430423100607185785054039","190903419842105574475501500775698464944","142717586158111270503823819061807603173","144189770428534875302669861187602610976","93194311289380118336124934858187992031","302017215365287451989701613141899619770","225898782230722386791742901136852980513","230693998704787385367614072333989838005","80166315916574719093926685697368683660","122269716863542909393186175246101033396","230693998704787385367614072333989838005","103485723289278307706768719667829574538","301884057955978051794073525212486723132","92598134377928132239649360454323652087","39699313502254205028906459162406368675","13397558939649396386474486187805786758","41866232512888504942304128357938133406","17376449365540832315957925428087940526","307807303052934585450808173196331905295","172649782484658335594624641698144433658","29174696824622897686174599313683294026","60348303524838200837806915240836162976","205130950075328670660949362543217903963","306998882643252163661099685640581103127","325525173887703431291165741884775863797","256680665047900213289469041958523339653","294986393455524337286040999653781525514","212112096660266839276265631858447557868","85421471902794362595936537186799806452","289623291231414906088777760183928469938","314540119803240203625407961711609831781","207120756591492767955500564449774603776","111688344916544619213706508410688729808","324639382510266819127169904810907270598","90698760234708858641811920697853453880","296848202541553201947183697581057762398","275111386154300975225333664178665769109","127146488309612988117538535159740474241","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25508-7c2f9b55","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_dsc_access"},"deprecated":false,"digest":{"function_hash":"45462595951379773585941786623287409556","length":373},"id":"CVE-2026-25508-7c39772d"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false,"digest":{"line_hashes":["14995544720486937275774499710030464432","281156845558696565371763276525268589323","126641375047763858361145910998321931866","62473897938282535547686015161346783899","156100672753514161061016751509569238140","38984603111101267351480134305415949000","322382760380431200178322535805649536959","315903252159372237838500514873033508191","32720033850564844600880951053237579536","279273384036628430423100607185785054039","190903419842105574475501500775698464944","142717586158111270503823819061807603173","144189770428534875302669861187602610976","93194311289380118336124934858187992031","302017215365287451989701613141899619770","225898782230722386791742901136852980513","230693998704787385367614072333989838005","80166315916574719093926685697368683660","122269716863542909393186175246101033396","230693998704787385367614072333989838005","103485723289278307706768719667829574538","301884057955978051794073525212486723132","92598134377928132239649360454323652087","39699313502254205028906459162406368675","13397558939649396386474486187805786758","41866232512888504942304128357938133406","17376449365540832315957925428087940526","307807303052934585450808173196331905295","172649782484658335594624641698144433658","29174696824622897686174599313683294026","60348303524838200837806915240836162976","205130950075328670660949362543217903963","306998882643252163661099685640581103127","325525173887703431291165741884775863797","256680665047900213289469041958523339653","294986393455524337286040999653781525514","212112096660266839276265631858447557868","85421471902794362595936537186799806452","289623291231414906088777760183928469938","314540119803240203625407961711609831781","207120756591492767955500564449774603776","111688344916544619213706508410688729808","324639382510266819127169904810907270598","90698760234708858641811920697853453880","296848202541553201947183697581057762398","275111386154300975225333664178665769109","127146488309612988117538535159740474241","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25508-7ca273bf","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"259771385175438895452569171096745912782","length":990},"id":"CVE-2026-25508-7ef330d4","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_connect"}},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"prepare_write_event_env"},"deprecated":false,"digest":{"function_hash":"246071474191416490191291873685275861098","length":2038},"id":"CVE-2026-25508-8191de22","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"246071474191416490191291873685275861098","length":2038},"id":"CVE-2026-25508-83929df1","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"function":"prepare_write_event_env","file":"components/protocomm/src/transports/protocomm_ble.c"}},{"digest":{"function_hash":"259771385175438895452569171096745912782","length":990},"id":"CVE-2026-25508-89f102ec","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_connect"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["14995544720486937275774499710030464432","281156845558696565371763276525268589323","126641375047763858361145910998321931866","62473897938282535547686015161346783899","156100672753514161061016751509569238140","236869822182097671947913059453617233632","141995168454696275635339528129016599677","254214841877067184331616076879465676280","157758147912296961435444943278374260824","38984603111101267351480134305415949000","322382760380431200178322535805649536959","315903252159372237838500514873033508191","32720033850564844600880951053237579536","279273384036628430423100607185785054039","190903419842105574475501500775698464944","142717586158111270503823819061807603173","144189770428534875302669861187602610976","93194311289380118336124934858187992031","302017215365287451989701613141899619770","225898782230722386791742901136852980513","230693998704787385367614072333989838005","80166315916574719093926685697368683660","122269716863542909393186175246101033396","230693998704787385367614072333989838005","103485723289278307706768719667829574538","301884057955978051794073525212486723132","92598134377928132239649360454323652087","39699313502254205028906459162406368675","13397558939649396386474486187805786758","41866232512888504942304128357938133406","317244194327752182728097878254186733083","26978584633754160777577560689935499190","290564003126783802964863135460022012477","17376449365540832315957925428087940526","307807303052934585450808173196331905295","172649782484658335594624641698144433658","29174696824622897686174599313683294026","60348303524838200837806915240836162976","205130950075328670660949362543217903963","306998882643252163661099685640581103127","325525173887703431291165741884775863797","256680665047900213289469041958523339653","246798283590726802912001083736206760991","50520197031508710948810545887463528096","231272143041137437160707085319672213152","23288644252381244891680926030942712387","314540119803240203625407961711609831781","285933844330886021754075661293939809104","235336850875718822200596618404899875078","205308063672049669863790528369528626174","259142076475321563649603459477676133333","275543465635192408518476595658462265385","324639382510266819127169904810907270598","220189664991189490637630175853138998731","42749813068584468022765656708074434424","297464230861028806264540141843722149732","100141813110512949510394868585705141646","24235370764360687857257125087792762465","139864388247591628080775434177188534175"]},"id":"CVE-2026-25508-8b681fa3","signature_type":"Line"},{"digest":{"function_hash":"52800084617639390724813296554893868485","length":133},"id":"CVE-2026-25508-8bc8ea55","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false},{"digest":{"line_hashes":["14995544720486937275774499710030464432","281156845558696565371763276525268589323","126641375047763858361145910998321931866","62473897938282535547686015161346783899","156100672753514161061016751509569238140","38984603111101267351480134305415949000","322382760380431200178322535805649536959","315903252159372237838500514873033508191","32720033850564844600880951053237579536","279273384036628430423100607185785054039","190903419842105574475501500775698464944","142717586158111270503823819061807603173","144189770428534875302669861187602610976","93194311289380118336124934858187992031","302017215365287451989701613141899619770","225898782230722386791742901136852980513","230693998704787385367614072333989838005","80166315916574719093926685697368683660","122269716863542909393186175246101033396","230693998704787385367614072333989838005","103485723289278307706768719667829574538","301884057955978051794073525212486723132","92598134377928132239649360454323652087","39699313502254205028906459162406368675","13397558939649396386474486187805786758","41866232512888504942304128357938133406","17376449365540832315957925428087940526","307807303052934585450808173196331905295","172649782484658335594624641698144433658","29174696824622897686174599313683294026","60348303524838200837806915240836162976","205130950075328670660949362543217903963","306998882643252163661099685640581103127","325525173887703431291165741884775863797","256680665047900213289469041958523339653","294986393455524337286040999653781525514","212112096660266839276265631858447557868","85421471902794362595936537186799806452","289623291231414906088777760183928469938","314540119803240203625407961711609831781","207120756591492767955500564449774603776","111688344916544619213706508410688729808","324639382510266819127169904810907270598","90698760234708858641811920697853453880","296848202541553201947183697581057762398","275111386154300975225333664178665769109","127146488309612988117538535159740474241","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25508-8be8cf66","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false},{"source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_disconnect"},"deprecated":false,"digest":{"function_hash":"137977890203657838024463867444851577239","length":1090},"id":"CVE-2026-25508-8c435674","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_disconnect"},"deprecated":false,"digest":{"function_hash":"252852174837927050436042974481345170084","length":1165},"id":"CVE-2026-25508-8c97fc83"},{"digest":{"function_hash":"29663101477782023129658245969149268064","length":123},"id":"CVE-2026-25508-8cb29fb0","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false},{"deprecated":false,"digest":{"length":1044,"function_hash":"265092944354878825703380833765338138336"},"id":"CVE-2026-25508-8f80654f","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_connect"}},{"target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_cleanup"},"deprecated":false,"digest":{"function_hash":"325787697391706651632886409764734061468","length":691},"id":"CVE-2026-25508-8fd65574","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663"},{"deprecated":false,"digest":{"function_hash":"325787697391706651632886409764734061468","length":691},"id":"CVE-2026-25508-9013134f","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_cleanup"}},{"deprecated":false,"digest":{"line_hashes":["257710264239704648227060232753346472612","329764188385261334565992717220351168316","120170865655081233682433304943533894427","32393058709236010179031793725661346622","21370391142885345095148611871644375611","97825778069687380037534977532010009802","246508871972459452726291885168072807557","281006511243982490344942443086886345087","244807548812852247264822494116682379642","58633829289552352613329210069842326384","261743385782775486851058475146143128234","260336413357353524056592476100375830586","6403994011351223087011048287023730918","177912674532721776956925475705211198728","318701918645424790588459160778805306676","101282999868686696806129532337943833204","285323255698958326450143928637599192282","260849133137630298758053022077191640656","259283405024063495438217518167157745266","211171762541864366821440965914535360712","221639113771852350065397501325224551592","164798815645570053988166372618537775337","258272738451812475861075652189910684284","48771159233669945975554797462733047346","40904896292973127358064133725647846","230693998704787385367614072333989838005","80166315916574719093926685697368683660","132245061728982872117091873350343975631","256569740479023789542707559100443732236","310782953103250125739886682930339281661","133763774347138115511292481038125693521","40904896292973127358064133725647846","230693998704787385367614072333989838005","103485723289278307706768719667829574538","87833027963148101384350870641982731386","133360392153856581929072633477251683360","170002391055020272968536153207288763445","186349025901675348896286860913784273159","338407048549300573683197613038948592792","241401798012532152388774189880585612580","190739601565344670200017528739349133085","121054594478200758090319324772495912393","24032427381127620851219797410527550641","61317576666999109176700232866034832349","252108714120504479691760312162722685385","45182758668270968110375149399302495827","29174696824622897686174599313683294026","33767420788268105640751016783522760772","253179518615540642366295748549525298510","36399169746633953973444720281940617483","126744274385603041662427707913519049681","176309035702742730672763291313291532739","79951578423774237636867445848485060455","271952480959408333370951241425238275695","208276206156888990735625202316702798628","284787200966007752833796429188004748861","332478570617641557769369082302790746094","208939754611489517550267289680481607442","53800392318657248124442643839055904693","86677704636607069303982909698592973070","195995100685626679922398767614059534385","338399132429815480241577549995444436226","127146488309612988117538535159740474241","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25508-91382fb6","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_ble.c"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_cleanup"},"deprecated":false,"digest":{"function_hash":"325787697391706651632886409764734061468","length":691},"id":"CVE-2026-25508-9419b59e"},{"digest":{"line_hashes":["257710264239704648227060232753346472612","329764188385261334565992717220351168316","120170865655081233682433304943533894427","32393058709236010179031793725661346622","21370391142885345095148611871644375611","97825778069687380037534977532010009802","246508871972459452726291885168072807557","281006511243982490344942443086886345087","244807548812852247264822494116682379642","58633829289552352613329210069842326384","261743385782775486851058475146143128234","260336413357353524056592476100375830586","6403994011351223087011048287023730918","177912674532721776956925475705211198728","318701918645424790588459160778805306676","101282999868686696806129532337943833204","285323255698958326450143928637599192282","260849133137630298758053022077191640656","259283405024063495438217518167157745266","211171762541864366821440965914535360712","221639113771852350065397501325224551592","116965301512959357285961195660163724577","328557855233430996665040222619231622341","300562617480593172536952913037424856968","164798815645570053988166372618537775337","258272738451812475861075652189910684284","48771159233669945975554797462733047346","40904896292973127358064133725647846","230693998704787385367614072333989838005","80166315916574719093926685697368683660","132245061728982872117091873350343975631","256569740479023789542707559100443732236","310782953103250125739886682930339281661","133763774347138115511292481038125693521","40904896292973127358064133725647846","230693998704787385367614072333989838005","103485723289278307706768719667829574538","87833027963148101384350870641982731386","133360392153856581929072633477251683360","170002391055020272968536153207288763445","186349025901675348896286860913784273159","338407048549300573683197613038948592792","241401798012532152388774189880585612580","190739601565344670200017528739349133085","121054594478200758090319324772495912393","24032427381127620851219797410527550641","1607587221917510676949498437119421598","251228176731292428129831321819074086122","104414682028185540061533032255749974548","61317576666999109176700232866034832349","252108714120504479691760312162722685385","45182758668270968110375149399302495827","29174696824622897686174599313683294026","296527540201909041392749463929930676993","165285451311214586206799876272560986142","165137778531504994716004771240476085421","301702447840036816887543860635180887757","79951578423774237636867445848485060455","271952480959408333370951241425238275695","208276206156888990735625202316702798628","284787200966007752833796429188004748861","197162619818149378243036155725851501758","164809818845664916219060741039574873025","48208582180861149522199007990478004153","85963354425167730939075044251024139352","247167436728612792580530030972844083652","53800392318657248124442643839055904693","183703022832257531494003559932363281481","120159778013182085180317695603820128453","25308624880274732059097199507510744640","298603250738959558840975376529198660865","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25508-96fdd0dd","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_disconnect"},"deprecated":false,"digest":{"function_hash":"137977890203657838024463867444851577239","length":1090},"id":"CVE-2026-25508-98e5e551"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_chr_access"},"deprecated":false,"digest":{"function_hash":"97570995413996262338588027328006426387","length":2248},"id":"CVE-2026-25508-9c720e45"},{"deprecated":false,"digest":{"function_hash":"66030955795817474467566410532838072500","length":1272},"id":"CVE-2026-25508-9fbb4fae","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_write"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"uuid128_to_handler"},"deprecated":false,"digest":{"function_hash":"185066475565834699703649049016163648732","length":499},"id":"CVE-2026-25508-a2e2d9f4"},{"id":"CVE-2026-25508-a353ebc5","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_disconnect"},"deprecated":false,"digest":{"function_hash":"252852174837927050436042974481345170084","length":1165}},{"id":"CVE-2026-25508-a41c268b","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"handle_to_handler"},"deprecated":false,"digest":{"function_hash":"159964077914903168610949221589574897068","length":369}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_connect"},"deprecated":false,"digest":{"function_hash":"265092944354878825703380833765338138336","length":1044},"id":"CVE-2026-25508-a41ec785"},{"id":"CVE-2026-25508-a483617a","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"protocomm_ble_stop"},"deprecated":false,"digest":{"function_hash":"167022205343871210898130668753455260858","length":818}},{"digest":{"function_hash":"259771385175438895452569171096745912782","length":990},"id":"CVE-2026-25508-a8f14917","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_connect"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_disconnect"},"deprecated":false,"digest":{"function_hash":"252852174837927050436042974481345170084","length":1165},"id":"CVE-2026-25508-a973ec57"},{"id":"CVE-2026-25508-ab8bf51e","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"prepare_write_event_env"},"deprecated":false,"digest":{"length":2038,"function_hash":"246071474191416490191291873685275861098"}},{"deprecated":false,"digest":{"line_hashes":["315096193931674132959326456275400050276","251510484522902961588729127448224250934","83172832641155593798515671104347638858","161839469816953246151106074888481895376"],"threshold":0.9},"id":"CVE-2026-25508-ac2ecfc3","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/simple_ble/simple_ble.c"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false,"digest":{"function_hash":"29663101477782023129658245969149268064","length":123},"id":"CVE-2026-25508-af4a6ced"},{"digest":{"function_hash":"329306190190962484664580386318247843807","length":3804},"id":"CVE-2026-25508-b2861334","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_start"},"deprecated":false},{"target":{"file":"components/protocomm/src/transports/protocomm_ble.c"},"deprecated":false,"digest":{"line_hashes":["257710264239704648227060232753346472612","329764188385261334565992717220351168316","120170865655081233682433304943533894427","32393058709236010179031793725661346622","21370391142885345095148611871644375611","97825778069687380037534977532010009802","246508871972459452726291885168072807557","281006511243982490344942443086886345087","244807548812852247264822494116682379642","58633829289552352613329210069842326384","261743385782775486851058475146143128234","260336413357353524056592476100375830586","6403994011351223087011048287023730918","177912674532721776956925475705211198728","318701918645424790588459160778805306676","101282999868686696806129532337943833204","285323255698958326450143928637599192282","260849133137630298758053022077191640656","259283405024063495438217518167157745266","211171762541864366821440965914535360712","221639113771852350065397501325224551592","164798815645570053988166372618537775337","258272738451812475861075652189910684284","48771159233669945975554797462733047346","40904896292973127358064133725647846","230693998704787385367614072333989838005","80166315916574719093926685697368683660","132245061728982872117091873350343975631","256569740479023789542707559100443732236","310782953103250125739886682930339281661","133763774347138115511292481038125693521","40904896292973127358064133725647846","230693998704787385367614072333989838005","103485723289278307706768719667829574538","87833027963148101384350870641982731386","133360392153856581929072633477251683360","170002391055020272968536153207288763445","186349025901675348896286860913784273159","338407048549300573683197613038948592792","241401798012532152388774189880585612580","190739601565344670200017528739349133085","121054594478200758090319324772495912393","24032427381127620851219797410527550641","61317576666999109176700232866034832349","252108714120504479691760312162722685385","45182758668270968110375149399302495827","29174696824622897686174599313683294026","33767420788268105640751016783522760772","253179518615540642366295748549525298510","36399169746633953973444720281940617483","126744274385603041662427707913519049681","176309035702742730672763291313291532739","79951578423774237636867445848485060455","271952480959408333370951241425238275695","208276206156888990735625202316702798628","284787200966007752833796429188004748861","332478570617641557769369082302790746094","208939754611489517550267289680481607442","53800392318657248124442643839055904693","86677704636607069303982909698592973070","195995100685626679922398767614059534385","338399132429815480241577549995444436226","127146488309612988117538535159740474241","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25508-b5182cb2","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7"},{"source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false,"digest":{"function_hash":"29663101477782023129658245969149268064","length":123},"id":"CVE-2026-25508-b71fc94d","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_start"},"deprecated":false,"digest":{"length":3804,"function_hash":"329306190190962484664580386318247843807"},"id":"CVE-2026-25508-bb4f601e","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_stop"},"deprecated":false,"digest":{"function_hash":"25331609710130255005843060589479922153","length":571},"id":"CVE-2026-25508-be421270"},{"id":"CVE-2026-25508-c135a4a4","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/include/transports/protocomm_ble.h"},"deprecated":false,"digest":{"line_hashes":["37132769335001316011630232488543223298","141995168454696275635339528129016599677","330138740435034522905652976341116148202","159614267102962228647958864165286888042"],"threshold":0.9}},{"source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false,"digest":{"function_hash":"29663101477782023129658245969149268064","length":123},"id":"CVE-2026-25508-c1c5e99c","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-25508-c2b26606","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_connect"},"deprecated":false,"digest":{"function_hash":"265092944354878825703380833765338138336","length":1044}},{"digest":{"function_hash":"325787697391706651632886409764734061468","length":691},"id":"CVE-2026-25508-c4d467ea","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_cleanup"},"deprecated":false},{"target":{"file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false,"digest":{"line_hashes":["14995544720486937275774499710030464432","221968878736916771240557810339805249367","57521880083523039665018450357729796334","62473897938282535547686015161346783899","156100672753514161061016751509569238140","236869822182097671947913059453617233632","154140376263394333444114814710497000062","328032751545377748258717892065275430084","295281356191233686076819427776143284739","38984603111101267351480134305415949000","322382760380431200178322535805649536959","315903252159372237838500514873033508191","32720033850564844600880951053237579536","279273384036628430423100607185785054039","190903419842105574475501500775698464944","142717586158111270503823819061807603173","144189770428534875302669861187602610976","93194311289380118336124934858187992031","302017215365287451989701613141899619770","225898782230722386791742901136852980513","230693998704787385367614072333989838005","80166315916574719093926685697368683660","122269716863542909393186175246101033396","230693998704787385367614072333989838005","103485723289278307706768719667829574538","301884057955978051794073525212486723132","92598134377928132239649360454323652087","39699313502254205028906459162406368675","13397558939649396386474486187805786758","41866232512888504942304128357938133406","317244194327752182728097878254186733083","26978584633754160777577560689935499190","290564003126783802964863135460022012477","17376449365540832315957925428087940526","307807303052934585450808173196331905295","172649782484658335594624641698144433658","29174696824622897686174599313683294026","60348303524838200837806915240836162976","205130950075328670660949362543217903963","306998882643252163661099685640581103127","325525173887703431291165741884775863797","256680665047900213289469041958523339653","246798283590726802912001083736206760991","50520197031508710948810545887463528096","231272143041137437160707085319672213152","23288644252381244891680926030942712387","314540119803240203625407961711609831781","285933844330886021754075661293939809104","235336850875718822200596618404899875078","205308063672049669863790528369528626174","259142076475321563649603459477676133333","275543465635192408518476595658462265385","324639382510266819127169904810907270598","220189664991189490637630175853138998731","42749813068584468022765656708074434424","297464230861028806264540141843722149732","100141813110512949510394868585705141646","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25508-c7e2ffc6","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6"},{"digest":{"line_hashes":["257710264239704648227060232753346472612","329764188385261334565992717220351168316","120170865655081233682433304943533894427","32393058709236010179031793725661346622","21370391142885345095148611871644375611","97825778069687380037534977532010009802","246508871972459452726291885168072807557","281006511243982490344942443086886345087","244807548812852247264822494116682379642","58633829289552352613329210069842326384","261743385782775486851058475146143128234","260336413357353524056592476100375830586","6403994011351223087011048287023730918","177912674532721776956925475705211198728","318701918645424790588459160778805306676","101282999868686696806129532337943833204","285323255698958326450143928637599192282","260849133137630298758053022077191640656","259283405024063495438217518167157745266","211171762541864366821440965914535360712","221639113771852350065397501325224551592","164798815645570053988166372618537775337","258272738451812475861075652189910684284","48771159233669945975554797462733047346","40904896292973127358064133725647846","230693998704787385367614072333989838005","80166315916574719093926685697368683660","132245061728982872117091873350343975631","256569740479023789542707559100443732236","310782953103250125739886682930339281661","133763774347138115511292481038125693521","40904896292973127358064133725647846","230693998704787385367614072333989838005","103485723289278307706768719667829574538","87833027963148101384350870641982731386","133360392153856581929072633477251683360","170002391055020272968536153207288763445","186349025901675348896286860913784273159","338407048549300573683197613038948592792","241401798012532152388774189880585612580","190739601565344670200017528739349133085","121054594478200758090319324772495912393","24032427381127620851219797410527550641","1607587221917510676949498437119421598","251228176731292428129831321819074086122","104414682028185540061533032255749974548","61317576666999109176700232866034832349","252108714120504479691760312162722685385","45182758668270968110375149399302495827","29174696824622897686174599313683294026","296527540201909041392749463929930676993","165285451311214586206799876272560986142","165137778531504994716004771240476085421","301702447840036816887543860635180887757","79951578423774237636867445848485060455","271952480959408333370951241425238275695","208276206156888990735625202316702798628","284787200966007752833796429188004748861","197162619818149378243036155725851501758","164809818845664916219060741039574873025","48208582180861149522199007990478004153","85963354425167730939075044251024139352","247167436728612792580530030972844083652","53800392318657248124442643839055904693","183703022832257531494003559932363281481","120159778013182085180317695603820128453","25308624880274732059097199507510744640","298603250738959558840975376529198660865","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25508-cb9ef266","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_ble.c"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_exec_write"},"deprecated":false,"digest":{"length":1193,"function_hash":"302502728169829495849238234762842032783"},"id":"CVE-2026-25508-cd7e621b"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_exec_write"},"deprecated":false,"digest":{"function_hash":"302502728169829495849238234762842032783","length":1193},"id":"CVE-2026-25508-cf34c29e"},{"target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_disconnect"},"deprecated":false,"digest":{"function_hash":"137977890203657838024463867444851577239","length":1090},"id":"CVE-2026-25508-d4832d16","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7"},{"deprecated":false,"digest":{"function_hash":"252852174837927050436042974481345170084","length":1165},"id":"CVE-2026-25508-d9cd3e9a","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"function":"transport_simple_ble_disconnect","file":"components/protocomm/src/transports/protocomm_nimble.c"}},{"deprecated":false,"digest":{"line_hashes":["257710264239704648227060232753346472612","329764188385261334565992717220351168316","120170865655081233682433304943533894427","32393058709236010179031793725661346622","21370391142885345095148611871644375611","97825778069687380037534977532010009802","246508871972459452726291885168072807557","281006511243982490344942443086886345087","244807548812852247264822494116682379642","58633829289552352613329210069842326384","261743385782775486851058475146143128234","260336413357353524056592476100375830586","6403994011351223087011048287023730918","177912674532721776956925475705211198728","318701918645424790588459160778805306676","101282999868686696806129532337943833204","285323255698958326450143928637599192282","260849133137630298758053022077191640656","259283405024063495438217518167157745266","211171762541864366821440965914535360712","221639113771852350065397501325224551592","164798815645570053988166372618537775337","258272738451812475861075652189910684284","48771159233669945975554797462733047346","40904896292973127358064133725647846","230693998704787385367614072333989838005","80166315916574719093926685697368683660","132245061728982872117091873350343975631","256569740479023789542707559100443732236","310782953103250125739886682930339281661","133763774347138115511292481038125693521","40904896292973127358064133725647846","230693998704787385367614072333989838005","103485723289278307706768719667829574538","87833027963148101384350870641982731386","133360392153856581929072633477251683360","170002391055020272968536153207288763445","186349025901675348896286860913784273159","338407048549300573683197613038948592792","241401798012532152388774189880585612580","190739601565344670200017528739349133085","121054594478200758090319324772495912393","24032427381127620851219797410527550641","61317576666999109176700232866034832349","252108714120504479691760312162722685385","45182758668270968110375149399302495827","29174696824622897686174599313683294026","33767420788268105640751016783522760772","253179518615540642366295748549525298510","36399169746633953973444720281940617483","126744274385603041662427707913519049681","176309035702742730672763291313291532739","79951578423774237636867445848485060455","271952480959408333370951241425238275695","208276206156888990735625202316702798628","284787200966007752833796429188004748861","332478570617641557769369082302790746094","208939754611489517550267289680481607442","53800392318657248124442643839055904693","86677704636607069303982909698592973070","195995100685626679922398767614059534385","338399132429815480241577549995444436226","127146488309612988117538535159740474241","24235370764360687857257125087792762465","139864388247591628080775434177188534175"],"threshold":0.9},"id":"CVE-2026-25508-db9f67e4","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_ble.c"}},{"target":{"file":"components/protocomm/include/transports/protocomm_ble.h"},"deprecated":false,"digest":{"line_hashes":["141995168454696275635339528129016599677","330138740435034522905652976341116148202","159614267102962228647958864165286888042"],"threshold":0.9},"id":"CVE-2026-25508-dbaf5540","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_dsc_access"},"deprecated":false,"digest":{"function_hash":"45462595951379773585941786623287409556","length":373},"id":"CVE-2026-25508-dc678af1"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_stop"},"deprecated":false,"digest":{"function_hash":"25331609710130255005843060589479922153","length":571},"id":"CVE-2026-25508-dcdb30d3","signature_type":"Function"},{"source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_stop"},"deprecated":false,"digest":{"function_hash":"284936264160764206896614385607726257107","length":650},"id":"CVE-2026-25508-df1e5b6e","signature_type":"Function","signature_version":"v1"},{"target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_disconnect"},"deprecated":false,"digest":{"function_hash":"137977890203657838024463867444851577239","length":1090},"id":"CVE-2026-25508-e0a2dabc","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf"},{"deprecated":false,"digest":{"length":373,"function_hash":"45462595951379773585941786623287409556"},"id":"CVE-2026-25508-e21815d0","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"gatt_svr_dsc_access"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_exec_write"},"deprecated":false,"digest":{"function_hash":"302502728169829495849238234762842032783","length":1193},"id":"CVE-2026-25508-e686c5d3"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"uuid128_to_handler"},"deprecated":false,"digest":{"function_hash":"185066475565834699703649049016163648732","length":499},"id":"CVE-2026-25508-e6f04077"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_write"},"deprecated":false,"digest":{"function_hash":"66030955795817474467566410532838072500","length":1272},"id":"CVE-2026-25508-e8b34ffb"},{"source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_exec_write"},"deprecated":false,"digest":{"function_hash":"302502728169829495849238234762842032783","length":1193},"id":"CVE-2026-25508-e951c9a8","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_write"},"deprecated":false,"digest":{"function_hash":"66030955795817474467566410532838072500","length":1272},"id":"CVE-2026-25508-e967f83e","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"protocomm_ble_stop"},"deprecated":false,"digest":{"length":913,"function_hash":"175949270531941533956132385938030403612"},"id":"CVE-2026-25508-ee1f27f4"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663","target":{"function":"transport_simple_ble_connect","file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false,"digest":{"length":1044,"function_hash":"265092944354878825703380833765338138336"},"id":"CVE-2026-25508-ee5787ff"},{"deprecated":false,"digest":{"function_hash":"265092944354878825703380833765338138336","length":1044},"id":"CVE-2026-25508-ef2fc5ca","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_connect"}},{"id":"CVE-2026-25508-ef4aa9b6","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"protocomm_ble_stop"},"deprecated":false,"digest":{"function_hash":"167022205343871210898130668753455260858","length":818}},{"deprecated":false,"digest":{"function_hash":"63200799082803172625061943333402630734","length":1305},"id":"CVE-2026-25508-efc746e1","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_read"}},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_disconnect"},"deprecated":false,"digest":{"length":1090,"function_hash":"137977890203657838024463867444851577239"},"id":"CVE-2026-25508-f213cfb1","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"29663101477782023129658245969149268064","length":123},"id":"CVE-2026-25508-f22a55cb","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_nimble.c","function":"transport_simple_ble_set_mtu"}},{"deprecated":false,"digest":{"function_hash":"302502728169829495849238234762842032783","length":1193},"id":"CVE-2026-25508-f35c9445","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_exec_write"}},{"source":"https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_set_mtu"},"deprecated":false,"digest":{"function_hash":"52800084617639390724813296554893868485","length":133},"id":"CVE-2026-25508-f3d18916","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-25508-f4e857b4","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_start"},"deprecated":false,"digest":{"length":3748,"function_hash":"294311160157959374696287409137008190556"}},{"target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"protocomm_ble_stop"},"deprecated":false,"digest":{"function_hash":"25331609710130255005843060589479922153","length":571},"id":"CVE-2026-25508-f6b1e518","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70"},{"id":"CVE-2026-25508-f7e1287a","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"handle_to_handler"},"deprecated":false,"digest":{"function_hash":"159964077914903168610949221589574897068","length":369}},{"digest":{"function_hash":"302502728169829495849238234762842032783","length":1193},"id":"CVE-2026-25508-f82e364d","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_exec_write"},"deprecated":false},{"id":"CVE-2026-25508-f93c1a1a","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70","target":{"file":"components/protocomm/src/transports/protocomm_ble.c","function":"transport_simple_ble_write"},"deprecated":false,"digest":{"function_hash":"66030955795817474467566410532838072500","length":1272}},{"target":{"function":"uuid128_to_handler","file":"components/protocomm/src/transports/protocomm_nimble.c"},"deprecated":false,"digest":{"function_hash":"185066475565834699703649049016163648732","length":499},"id":"CVE-2026-25508-fd9ade78","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-25508.json","vanir_signatures_modified":"2026-08-12T15:31:54Z"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H"}]}