{"id":"CVE-2026-45328","summary":"ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers","details":"ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, the esp_tee component exposes secure-service wrappers in esp_secure_services.c and esp_secure_services_iram.c that bridge calls from the user application (i.e. the REE) to TEE-protected hardware peripherals (AES, SHA, ECC, HMAC, SPI, MMU, WDT) and to the security feature like attestation, OTA updates, secure storage. This issue has been patched in versions 5.5.5 and 6.0.1.","aliases":["GHSA-mmgp-73p4-92xp"],"modified":"2026-08-12T16:25:17.546592Z","published":"2026-06-10T00:33:43.997Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-20","CWE-787"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45328.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45328.json"},{"type":"ADVISORY","url":"https://github.com/espressif/esp-idf/security/advisories/GHSA-mmgp-73p4-92xp"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45328"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/440a5d1906502023f2a0fb0aecbdf0602d14acbf"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/764626a1b7c85b943d207da08a2f8f7d7f3def4d"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/afd14ab113acd0ca369965404c99ac42e74d4fcd"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/espressif/esp-idf","events":[{"introduced":"735507283d5b2f9fb363a1901172dbd9e847945d"},{"fixed":"145ba4c42dc8283054cfde9a1c3470db7399192f"},{"fixed":"440a5d1906502023f2a0fb0aecbdf0602d14acbf"},{"fixed":"764626a1b7c85b943d207da08a2f8f7d7f3def4d"},{"fixed":"7867f4a57560bf9fc4a931e37ba02b7a3e9f406b"},{"fixed":"afd14ab113acd0ca369965404c99ac42e74d4fcd"},{"fixed":"eebabaff2fdc273b1530fe66e55fb3bcd181dfd6"}],"database_specific":{"extracted_events":[{"introduced":"5.5.4"},{"last_affected":"5.5.4"},{"introduced":"6.0"},{"last_affected":"6.0"}],"source":["CPE_STRING","REFERENCES"],"cpe":["cpe:2.3:a:espressif:esp-idf:5.5.4:*:*:*:*:*:*:*","cpe:2.3:a:espressif:esp-idf:6.0:*:*:*:*:*:*:*"]}}],"versions":["5.5.4","6.0","= 5.5.4","= 6.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-45328.json","vanir_signatures_modified":"2026-08-12T16:25:17Z","vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"function":"_ss_spi_flash_hal_device_config","file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c"},"deprecated":false,"digest":{"length":64,"function_hash":"305148560463794313365999651028358570527"},"id":"CVE-2026-45328-01de2826"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_setup_read_suspend"},"deprecated":false,"digest":{"length":94,"function_hash":"290273743467552009310262483972200228384"},"id":"CVE-2026-45328-031bde4c","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c"},"deprecated":false,"digest":{"line_hashes":["268775783363746402426002106281150673420","40456189074984454776262952962867141853","283557230448094462604617807857056100596","67391344783879268398466862818874279140","40475364596708170310066163220064098402","844183067832131361579226701967074356","90837304570995490932517008006259439266","43124415952018555883131585319890569759","29468871790500236081422314219485223056","310783280756251265529216503633740957004","217213143308617297665608172714533393670","174675279832220323520748543572029087762","245126951998442292421485406355786667924","271960432864333283301904253809265209939","4472710446093545944854735036299879414","127241999504988438438458588731976407927","191186236172428241814206655999432669293","13013618659941319574356491094097354776","56890641369846557167353292699180310811","241172354030419077543241532760395834805","227325875729919749470618325390312000414","246768938004522920383064612506640423242","339245066703615483784245859638666773656","290654223411547049556978480971377707271","63578649393956540163421060044583557918","93840978487025027730868917417477142381","91719775402753070977603497095482100111","105172334100217341348273892019993915413","107594010224914266528064355305432264499","38004855975537759787359631024558115642","193104775803760098425918426666698193930","210673510601435069452010560156583482620","41506893136461743719568698723131111265","5975859672693939474182176766448466765","92824461747257507534371935348465256719","154111490079351941546922703582616740820","148688815889306428773874348865690929461","16182610963845012506258691366372338597","184980503536398220923983672433499185693","179293642403227754958927034895746644810","135423983164784444785428505674462501809","107594010224914266528064355305432264499","38004855975537759787359631024558115642","193104775803760098425918426666698193930","210673510601435069452010560156583482620","41506893136461743719568698723131111265","5975859672693939474182176766448466765","92824461747257507534371935348465256719","154111490079351941546922703582616740820","148688815889306428773874348865690929461","16182610963845012506258691366372338597","184980503536398220923983672433499185693","206839187527142638901807028546369622678","112529227477207716986437030233526403768","134796566749769269658637073060914098670","19687223828382109859457644656670271903","200310666584340912513230440118610187662","189724308093330918089538344630365350047","153140940095445910333020837277433563529","269663334013966182074039061304120636391","188918929777599613153905401771622263389","210879857421522672642573461061349891983","309542178477698488492911451573026919529","80023569787312012133030242297258283545","232011650053993482535965827437009424657","337079203139414328840508781904824186610","88246365372158899606902807210483203642","239906689352177578097804065608376756883","129573096929462382428607637338372037199","203421936451039119659039503372890525458","86610778969413797237369039616844817988","176490723555422012689343360974892658566","80302161015333584789354900678841686641","178916496483858975429443044080202109061","107120969233133531144157250200930433004","10508150390454847125116649149304661998","285054805325677437176026922962529941753","263893837258881441555624359429958504107","207491022690038531446576018635017217082","228700308144745832674125344482489435227","224635625566817710542932177047267327249","62508113415805934047552568884238693566","66618087002144974660902722770795599571","156244676276712855198895936071392257479","262729984301065537611295097329690034167","304424559060147560449331583671179130186","187376134014859542970409390758564957701","149119625988958600893363264576268994328","47151567190721239495226633921569958776","72953382138274242102012938037383282004","159499796457830250130698925726025504114","169407808264649440224783158300643272787","177637024898403522809013764744178523064","60557174308731322744184504915107774805","57004071906104613819247490294502335445","277972363028900620300210978432512377205","233534234539558768961764537686250640938","120964110697902661021988131491567744253","100063538658715128708798593318606020576","40548758599749479190791093607363185227","111413152428028895034858142635084119158","103768153337180559631299760286115662130","176584393700949256963792424270840892446","96965394524666174032768644872226014293","223638632695206949900804210075283773869","45780420184685485565044647167794092235","49349137188221029820651636381569983233","319420662144570865804805569440593908988","211254357656768230942691696849840417213","316346235607789777842556260670141518301","60491984171504712358573402656666864381","164119520718585196489758132011853949976","156883564763652923911139060504885419217","86409542714179840978413066235832616391","214262918075978586647638800863564325043","15001173529868018833485631684964891751","301719556391848804070379409690134490352","324587869477214951329401874621744379099","120256618499798790757846048570189635043","207830950991560740419060386761159788633","197454404892881834488579920487415460872","56121993914710468034913664108482162761","209825694001219710151784401592885305776","10349133726724360656562572225075248214","89596549563494561771018047415368712657","274371666757532531898214146653817918812","90383693061177029020001155719617385595","168002022645030216925173234096761409859","120256618499798790757846048570189635043","207830950991560740419060386761159788633","309705300518220643310592178306478422307","23684273775972484886138074384736503178","316123102619581750034405251847427993433","55082325397223501176403937615557369911","246341054711435618352566172449454568345","284656917275139254409742404707819306386","118111724872238012127565888373249772824","8910661790318391837937137911995725104","329745287592631893096686803092768245363","284707344347448458053258677354075526510","126130478837488320229224462880911988650","99565028245735113531528209857438861810","208540125134282793755290608769127912666","153243100976715191755675636841179406329","99201040286162324442577806279332326903","239650855710934943411658919893401940037","109174718384118463445575697909682604378","311896862964302690411484515644664216131","23015157405566035364602252423909815485","264246452977720486596969352774817650700","199634893112334772740028500709661963538","286603283716028339842040865584998122650","23178910158268877546163426178891645303","215398573403733504636176548586559274737","124081747436876665967371543310093556782","118049759476020700961733913632609936204","311654867132070190603309187258525817572","234288697548758336373302213242595478270","56381139663140375196627448176364277743","6648552910833172592378973991937265289","208330856753781858003471227731497674065","290289466665999709809850510151489685909","192309891670712228514098843888326811725","111825585893557909753839575670115630029","235361471030198144066133440475179903144","159145401833170633489131873061854718995","251944081967483363045370193400461706545","128437302509500207881167471453599823684","51993912474362239491752475580816769277","3540269454055646868566928825044784343","11825093658337100409357484352075268373","229344783470975633597433871055152947852","222425611796167141504570559974135462808","26357158655018517206862049397600140934","59061238708102354211040062946660983191","315628191281694992014381970047413783330","77026472147631324656919749756245657672","157224051732482942337150358723560302259","185948575155826961620286183467761182997","33865188987455987759326577924696133695","132984444355140690904509583965613004046","264334950449219438589396171153727711295","315969100422305726308865005733637308048","44666091733248328036355822671140914469","308706508333355589760153278227813593228","309428718546715635454334405941610375278","260334283116974600884126477590282764409","69215672758086507962230466542084874490","167802274441021758533926567743362991929","299525353795094270378492325031447737815","248092708002032213527617538279762632230","40522638289901578952205882740469498179","92616643247114301890014241103469166237","146951955044302291472671800415257860128","203659778222165884296023838560585256487","284265616264764661184694073006963751619","67477626105595881121108916806039033341","58924393459968150399436100483512483677","250260825750778276804715595316072641876","258197069745863592335578838499471968395","213001715752494630069164852453011676327","141524140751494236432010963126055478530","30517122265411441421206455809415735116","137017202300729926293762618609529667072","231021704375184415248277766874400267550","81117909768419521127924780028205395397","17235978794505346274907209920000156989","165867785977192695883214330203389160806","166643104161288745696894861335641929354","36169350469437093332644804375753098324","52245712052178349267619601384018352394","90818487859624512597952257029244248381","297712950769859214491055557554163896145"],"threshold":0.9},"id":"CVE-2026-45328-034630c8"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/include/esp_tee_memory_utils.h"},"deprecated":false,"digest":{"line_hashes":["330664118489061391736400372809865372836","173465907516237228001141276239039176179","11403253774134510325954060494888462577","246797853339348591608170989686115584162","157789404149273655162301452573559296586","303200302654806278897313721660710845054","106789108972673407858566081835160337616","54363335438470798193418802559073151246","238483817896013330648731570367782840129","30851576294422901886143346073403006342","19062842662198554069237968113056886822"],"threshold":0.9},"id":"CVE-2026-45328-042e0b2f","signature_type":"Line"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_ds_encrypt_params"},"deprecated":false,"digest":{"function_hash":"93594254439997556944214461604052003598","length":453},"id":"CVE-2026-45328-0450aa2e","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"246524466716360441320773295697201392648","length":116},"id":"CVE-2026-45328-04bfe1ff","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/common/multi_heap.c","function":"multi_heap_assert"}},{"deprecated":false,"digest":{"function_hash":"232552840595138608872062541276044332981","length":107},"id":"CVE-2026-45328-04deffd0","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_sha_block"}},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_wdt_hal_init"},"deprecated":false,"digest":{"function_hash":"229839935718288322898163463422272738480","length":123},"id":"CVE-2026-45328-0ace7453","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_aes_crypt_ofb"},"deprecated":false,"digest":{"length":452,"function_hash":"95351206766206192551875129322006160420"},"id":"CVE-2026-45328-0b90f859"},{"id":"CVE-2026-45328-0c4f80ce","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_aes_crypt_cbc"},"deprecated":false,"digest":{"function_hash":"117433597587519446598280648739031280761","length":450}},{"target":{"file":"components/esp_tee/subproject/main/common/multi_heap.c","function":"multi_heap_assert"},"deprecated":false,"digest":{"function_hash":"246524466716360441320773295697201392648","length":116},"id":"CVE-2026-45328-0fbaab83","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b"},{"id":"CVE-2026-45328-11d5859d","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"function":"_ss_esp_aes_crypt_ctr","file":"components/esp_tee/subproject/main/core/esp_secure_services.c"},"deprecated":false,"digest":{"length":490,"function_hash":"65190414740433961034322449208763377646"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_hmac_jtag_enable"},"deprecated":false,"digest":{"function_hash":"198550884093557428608222885047777027990","length":409},"id":"CVE-2026-45328-14823603"},{"target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_sha_write_digest_state"},"deprecated":false,"digest":{"function_hash":"184037060194043114744803408213478638284","length":79},"id":"CVE-2026-45328-14bbd0a1","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b"},{"digest":{"function_hash":"116308586657599872427077084610715215459","length":417},"id":"CVE-2026-45328-15d04854","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_esp_tee_sec_storage_ecdsa_sign"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"847157273715919315975975117732995954","length":235},"id":"CVE-2026-45328-1b5d624f","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_erase_block"}},{"deprecated":false,"digest":{"function_hash":"47766972182221147886865638819676648064","length":319},"id":"CVE-2026-45328-1cc66a79","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_ds_finish_sign"}},{"id":"CVE-2026-45328-1f417202","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_ds_encrypt_params_using_key_type"},"deprecated":false,"digest":{"function_hash":"35949869139746048084804144535195281358","length":639}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_device_config"},"deprecated":false,"digest":{"function_hash":"305148560463794313365999651028358570527","length":64},"id":"CVE-2026-45328-2022075e"},{"target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_esp_tee_sec_storage_ecdsa_sign_pbkdf2"},"deprecated":false,"digest":{"function_hash":"308741724757485086015913247449767214223","length":676},"id":"CVE-2026-45328-204b8a68","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6"},{"source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_sha_write_digest_state"},"deprecated":false,"digest":{"function_hash":"184037060194043114744803408213478638284","length":79},"id":"CVE-2026-45328-23f0dd40","signature_type":"Function","signature_version":"v1"},{"target":{"file":"components/esp_tee/subproject/main/core/esp_secure_service_table.c"},"deprecated":false,"digest":{"line_hashes":["169079003700963788881292517166479641032","223738166604245136099086145270248183263","160448650674320302306656249389597484059","180234815418628393812679074575410414027"],"threshold":0.9},"id":"CVE-2026-45328-261cc64d","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/764626a1b7c85b943d207da08a2f8f7d7f3def4d"},{"deprecated":false,"digest":{"function_hash":"183634096378577029396003366696508965579","length":405},"id":"CVE-2026-45328-26cef03a","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_mmu_hal_map_region"}},{"deprecated":false,"digest":{"function_hash":"183634096378577029396003366696508965579","length":405},"id":"CVE-2026-45328-271cce1e","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_mmu_hal_map_region"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"function":"_ss_esp_tee_sec_storage_ecdsa_sign","file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c"},"deprecated":false,"digest":{"function_hash":"116308586657599872427077084610715215459","length":417},"id":"CVE-2026-45328-28cdbbfe"},{"deprecated":false,"digest":{"function_hash":"228742677665624739622986632387128211594","length":203},"id":"CVE-2026-45328-29f28535","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_memspi_host_flush_cache"}},{"deprecated":false,"digest":{"function_hash":"195357006254119007416041420604791084814","length":394},"id":"CVE-2026-45328-29f74c75","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_aes_crypt_ecb"}},{"digest":{"function_hash":"308741724757485086015913247449767214223","length":676},"id":"CVE-2026-45328-2ab897a9","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_esp_tee_sec_storage_ecdsa_sign_pbkdf2"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"267909448837731289281934636931134888842","length":474},"id":"CVE-2026-45328-2b21310d","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_aes_crypt_cfb128"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/components/tee_ota_ops/esp_tee_ota_ops.c","function":"esp_tee_ota_write"},"deprecated":false,"digest":{"function_hash":"175069993103929722896936475206424603136","length":818},"id":"CVE-2026-45328-2c26bc6f"},{"digest":{"length":450,"function_hash":"117433597587519446598280648739031280761"},"id":"CVE-2026-45328-2e04b4c8","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_aes_crypt_cfb8"},"deprecated":false},{"source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/include/esp_tee_memory_utils.h"},"deprecated":false,"digest":{"line_hashes":["330664118489061391736400372809865372836","309517431928753915790509370431670839154","250010963386345735663612979148038932035","123020655553725300114442114184505501738","89899399859753332496853786493371856646","130913656557973156957725944236011343210","81621491899771501976431061491610256378"],"threshold":0.9},"id":"CVE-2026-45328-2ea4d781","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_esp_tee_sec_storage_ecdsa_sign"},"deprecated":false,"digest":{"function_hash":"116308586657599872427077084610715215459","length":417},"id":"CVE-2026-45328-2f08c5f6"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_psa_initial_attest_get_token"},"deprecated":false,"digest":{"function_hash":"301528459072009130556111333637016274234","length":573},"id":"CVE-2026-45328-2f62c448"},{"deprecated":false,"digest":{"function_hash":"84442747797294274556583165337632559779","length":791},"id":"CVE-2026-45328-300bb13f","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_esp_tee_sec_storage_aead_decrypt"}},{"deprecated":false,"digest":{"length":182,"function_hash":"241409007330209431147378823599981387625"},"id":"CVE-2026-45328-311bb73d","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"function":"_ss_psa_initial_attest_get_token_size","file":"components/esp_tee/subproject/main/core/esp_secure_services.c"}},{"deprecated":false,"digest":{"function_hash":"64536371713713204430212105578224459757","length":255},"id":"CVE-2026-45328-3327b652","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_erase_sector"}},{"digest":{"length":427,"function_hash":"221986285490819012608861958697474149094"},"id":"CVE-2026-45328-3384d775","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_program_page"},"deprecated":false},{"deprecated":false,"digest":{"length":236,"function_hash":"84435900469094295083652786997219026431"},"id":"CVE-2026-45328-37af4410","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_mmu_hal_paddr_to_vaddr"}},{"deprecated":false,"digest":{"function_hash":"84435900469094295083652786997219026431","length":236},"id":"CVE-2026-45328-394d81b1","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_mmu_hal_paddr_to_vaddr"}},{"deprecated":false,"digest":{"function_hash":"305148560463794313365999651028358570527","length":64},"id":"CVE-2026-45328-39e435a4","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_check_status"}},{"source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_ds_start_sign"},"deprecated":false,"digest":{"function_hash":"302293931358700619908268541645030386668","length":533},"id":"CVE-2026-45328-3b034e6e","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"148531830299181059324652930051072348740","length":86},"id":"CVE-2026-45328-3db504dc","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_chip_generic_config_host_io_mode"}},{"id":"CVE-2026-45328-3e23cac0","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_erase_sector"},"deprecated":false,"digest":{"function_hash":"64536371713713204430212105578224459757","length":255}},{"deprecated":false,"digest":{"function_hash":"261525811991496363322672714585696835004","length":272},"id":"CVE-2026-45328-3f6ceff8","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_tee_ota_write"}},{"deprecated":false,"digest":{"function_hash":"290273743467552009310262483972200228384","length":94},"id":"CVE-2026-45328-41228815","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_supports_direct_read"}},{"id":"CVE-2026-45328-428f7082","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_sha_write_digest_state"},"deprecated":false,"digest":{"function_hash":"184037060194043114744803408213478638284","length":79}},{"source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/common/multi_heap.c"},"deprecated":false,"digest":{"line_hashes":["175858594811677782431503023722432476094","131630921575358928994058125685856460780","15908588244074761831049838149364145922","127178942594319200756991301987176968299","168615428499289416017660387409639575435"],"threshold":0.9},"id":"CVE-2026-45328-4366fa08","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_aes_crypt_ecb"},"deprecated":false,"digest":{"function_hash":"195357006254119007416041420604791084814","length":394},"id":"CVE-2026-45328-444660ac"},{"source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_device_config"},"deprecated":false,"digest":{"function_hash":"305148560463794313365999651028358570527","length":64},"id":"CVE-2026-45328-4730d990","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_common_command"},"deprecated":false,"digest":{"function_hash":"5858636670878277444883578759503465571","length":333},"id":"CVE-2026-45328-4792eb81","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_bootloader_flash_execute_command_common"},"deprecated":false,"digest":{"function_hash":"327090567935506191312782166294518084069","length":396},"id":"CVE-2026-45328-488e5922","signature_type":"Function"},{"id":"CVE-2026-45328-4902382e","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_sha_block"},"deprecated":false,"digest":{"function_hash":"232552840595138608872062541276044332981","length":107}},{"id":"CVE-2026-45328-4ec23c4c","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/components/tee_ota_ops/esp_tee_ota_ops.c"},"deprecated":false,"digest":{"line_hashes":["186637848761953063145763839389977597096","275938434839660328995706447160313482735","76553149807437493202996993610533947333","221723198154608087139200189238618946304"],"threshold":0.9}},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_esp_tee_sec_storage_aead_decrypt"},"deprecated":false,"digest":{"length":791,"function_hash":"84442747797294274556583165337632559779"},"id":"CVE-2026-45328-5293ef98","signature_type":"Function"},{"deprecated":false,"digest":{"line_hashes":["315140927608339237213381478876632809070","281926397812571851163025824999033106278","326234253325873253894430295671987482992","270120180783258617724650808414358743736","157660549986654981909090679954512448861","297870928663164770064879605942934370210","56332303444068541500081529497362177607","40780087060968779716328109236627312050","32685572497715544142216721530110178025","63514592010264105328520901313442218585","94664861146055377073831247664294704880","155933941215619011603905307281830517405","2933606638493024713361786244874097769","232736137501768896739599994853151001679","328621857408547548510831893843788564312"],"threshold":0.9},"id":"CVE-2026-45328-56734284","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/test_apps/tee_test_fw/main/test_esp_tee_sec_stg.c"}},{"deprecated":false,"digest":{"function_hash":"26111237731698604278276945993972540361","length":216},"id":"CVE-2026-45328-56a90722","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_mmu_hal_vaddr_to_paddr"}},{"deprecated":false,"digest":{"function_hash":"146584827923362271112638520038684131534","length":463},"id":"CVE-2026-45328-56dbe791","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_sha_dma"}},{"id":"CVE-2026-45328-56ff2c42","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_esp_tee_sec_storage_ecdsa_get_pubkey"},"deprecated":false,"digest":{"function_hash":"179832527434112388112768876014717635026","length":285}},{"id":"CVE-2026-45328-5b5d5ae0","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_esp_tee_sec_storage_aead_decrypt"},"deprecated":false,"digest":{"length":770,"function_hash":"131315198810787049866539614533939023137"}},{"target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_setup_read_suspend"},"deprecated":false,"digest":{"function_hash":"290273743467552009310262483972200228384","length":94},"id":"CVE-2026-45328-5ea32818","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"function":"_ss_esp_ecc_point_multiply","file":"components/esp_tee/subproject/main/core/esp_secure_services.c"},"deprecated":false,"digest":{"function_hash":"306026328898128159234097001515352707409","length":313},"id":"CVE-2026-45328-608d3b10"},{"target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_read"},"deprecated":false,"digest":{"length":446,"function_hash":"277160443927421792188967348988515719223"},"id":"CVE-2026-45328-60a24b2d","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b"},{"id":"CVE-2026-45328-61e9da8d","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/test_apps/tee_test_fw/main/test_esp_tee_sec_stg.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["190701060626530028567970110774347840784","93448411076754516026792259733207411585","273392499566070126470103530650241649371","119101672385863359109766033993138952214","24367233881238644416299822704769020750","161989381676030624923819301011795175349","227973398041536878741761127886539178696","227359987183578297854338871866109510536","88177652526010180521816586633848446357","281663771254375532396095572547865801878","234246800428039382510109185350600910739"]}},{"deprecated":false,"digest":{"function_hash":"146584827923362271112638520038684131534","length":463},"id":"CVE-2026-45328-639e4670","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_sha_dma"}},{"target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c"},"deprecated":false,"digest":{"line_hashes":["268775783363746402426002106281150673420","40456189074984454776262952962867141853","283557230448094462604617807857056100596","67391344783879268398466862818874279140","40475364596708170310066163220064098402","844183067832131361579226701967074356","90837304570995490932517008006259439266","43124415952018555883131585319890569759","29468871790500236081422314219485223056","310783280756251265529216503633740957004","217213143308617297665608172714533393670","174675279832220323520748543572029087762","245126951998442292421485406355786667924","271960432864333283301904253809265209939","4472710446093545944854735036299879414","127241999504988438438458588731976407927","191186236172428241814206655999432669293","13013618659941319574356491094097354776","56890641369846557167353292699180310811","241172354030419077543241532760395834805","227325875729919749470618325390312000414","246768938004522920383064612506640423242","339245066703615483784245859638666773656","290654223411547049556978480971377707271","63578649393956540163421060044583557918","93840978487025027730868917417477142381","91719775402753070977603497095482100111","105172334100217341348273892019993915413","107594010224914266528064355305432264499","38004855975537759787359631024558115642","193104775803760098425918426666698193930","210673510601435069452010560156583482620","41506893136461743719568698723131111265","5975859672693939474182176766448466765","92824461747257507534371935348465256719","154111490079351941546922703582616740820","148688815889306428773874348865690929461","16182610963845012506258691366372338597","184980503536398220923983672433499185693","179293642403227754958927034895746644810","135423983164784444785428505674462501809","107594010224914266528064355305432264499","38004855975537759787359631024558115642","193104775803760098425918426666698193930","210673510601435069452010560156583482620","41506893136461743719568698723131111265","5975859672693939474182176766448466765","92824461747257507534371935348465256719","154111490079351941546922703582616740820","148688815889306428773874348865690929461","16182610963845012506258691366372338597","184980503536398220923983672433499185693","206839187527142638901807028546369622678","112529227477207716986437030233526403768","134796566749769269658637073060914098670","19687223828382109859457644656670271903","200310666584340912513230440118610187662","189724308093330918089538344630365350047","153140940095445910333020837277433563529","269663334013966182074039061304120636391","188918929777599613153905401771622263389","210879857421522672642573461061349891983","309542178477698488492911451573026919529","80023569787312012133030242297258283545","232011650053993482535965827437009424657","337079203139414328840508781904824186610","88246365372158899606902807210483203642","239906689352177578097804065608376756883","129573096929462382428607637338372037199","203421936451039119659039503372890525458","86610778969413797237369039616844817988","176490723555422012689343360974892658566","80302161015333584789354900678841686641","178916496483858975429443044080202109061","107120969233133531144157250200930433004","10508150390454847125116649149304661998","285054805325677437176026922962529941753","263893837258881441555624359429958504107","207491022690038531446576018635017217082","228700308144745832674125344482489435227","224635625566817710542932177047267327249","62508113415805934047552568884238693566","66618087002144974660902722770795599571","156244676276712855198895936071392257479","262729984301065537611295097329690034167","304424559060147560449331583671179130186","187376134014859542970409390758564957701","149119625988958600893363264576268994328","47151567190721239495226633921569958776","72953382138274242102012938037383282004","159499796457830250130698925726025504114","169407808264649440224783158300643272787","177637024898403522809013764744178523064","60557174308731322744184504915107774805","57004071906104613819247490294502335445","277972363028900620300210978432512377205","233534234539558768961764537686250640938","120964110697902661021988131491567744253","100063538658715128708798593318606020576","40548758599749479190791093607363185227","111413152428028895034858142635084119158","103768153337180559631299760286115662130","176584393700949256963792424270840892446","96965394524666174032768644872226014293","223638632695206949900804210075283773869","45780420184685485565044647167794092235","49349137188221029820651636381569983233","319420662144570865804805569440593908988","211254357656768230942691696849840417213","316346235607789777842556260670141518301","60491984171504712358573402656666864381","164119520718585196489758132011853949976","156883564763652923911139060504885419217","86409542714179840978413066235832616391","214262918075978586647638800863564325043","15001173529868018833485631684964891751","301719556391848804070379409690134490352","324587869477214951329401874621744379099","120256618499798790757846048570189635043","207830950991560740419060386761159788633","197454404892881834488579920487415460872","56121993914710468034913664108482162761","209825694001219710151784401592885305776","10349133726724360656562572225075248214","89596549563494561771018047415368712657","274371666757532531898214146653817918812","90383693061177029020001155719617385595","168002022645030216925173234096761409859","120256618499798790757846048570189635043","207830950991560740419060386761159788633","309705300518220643310592178306478422307","23684273775972484886138074384736503178","316123102619581750034405251847427993433","55082325397223501176403937615557369911","246341054711435618352566172449454568345","284656917275139254409742404707819306386","118111724872238012127565888373249772824","8910661790318391837937137911995725104","329745287592631893096686803092768245363","284707344347448458053258677354075526510","126130478837488320229224462880911988650","99565028245735113531528209857438861810","208540125134282793755290608769127912666","153243100976715191755675636841179406329","99201040286162324442577806279332326903","239650855710934943411658919893401940037","109174718384118463445575697909682604378","311896862964302690411484515644664216131","23015157405566035364602252423909815485","264246452977720486596969352774817650700","199634893112334772740028500709661963538","286603283716028339842040865584998122650","23178910158268877546163426178891645303","215398573403733504636176548586559274737","124081747436876665967371543310093556782","118049759476020700961733913632609936204","311654867132070190603309187258525817572","234288697548758336373302213242595478270","56381139663140375196627448176364277743","6648552910833172592378973991937265289","208330856753781858003471227731497674065","290289466665999709809850510151489685909","192309891670712228514098843888326811725","111825585893557909753839575670115630029","235361471030198144066133440475179903144","159145401833170633489131873061854718995","251944081967483363045370193400461706545","128437302509500207881167471453599823684","51993912474362239491752475580816769277","3540269454055646868566928825044784343","11825093658337100409357484352075268373","229344783470975633597433871055152947852","222425611796167141504570559974135462808","26357158655018517206862049397600140934","59061238708102354211040062946660983191","315628191281694992014381970047413783330","77026472147631324656919749756245657672","157224051732482942337150358723560302259","185948575155826961620286183467761182997","33865188987455987759326577924696133695","132984444355140690904509583965613004046","264334950449219438589396171153727711295","315969100422305726308865005733637308048","44666091733248328036355822671140914469","308706508333355589760153278227813593228","309428718546715635454334405941610375278","260334283116974600884126477590282764409","69215672758086507962230466542084874490","167802274441021758533926567743362991929","299525353795094270378492325031447737815","248092708002032213527617538279762632230","40522638289901578952205882740469498179","92616643247114301890014241103469166237","146951955044302291472671800415257860128","203659778222165884296023838560585256487","284265616264764661184694073006963751619","67477626105595881121108916806039033341","58924393459968150399436100483512483677","250260825750778276804715595316072641876","258197069745863592335578838499471968395","213001715752494630069164852453011676327","141524140751494236432010963126055478530","30517122265411441421206455809415735116","137017202300729926293762618609529667072","231021704375184415248277766874400267550","81117909768419521127924780028205395397","17235978794505346274907209920000156989","165867785977192695883214330203389160806","166643104161288745696894861335641929354","36169350469437093332644804375753098324","52245712052178349267619601384018352394","90818487859624512597952257029244248381","297712950769859214491055557554163896145"],"threshold":0.9},"id":"CVE-2026-45328-64e63f5f","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b"},{"digest":{"length":94,"function_hash":"290273743467552009310262483972200228384"},"id":"CVE-2026-45328-67c7a3cd","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_supports_direct_write"},"deprecated":false},{"source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_ds_encrypt_params"},"deprecated":false,"digest":{"function_hash":"280701531613231092228395990342381962603","length":617},"id":"CVE-2026-45328-697060db","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"5858636670878277444883578759503465571","length":333},"id":"CVE-2026-45328-6b93d727","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_common_command"},"deprecated":false},{"source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_chip_generic_config_host_io_mode"},"deprecated":false,"digest":{"function_hash":"148531830299181059324652930051072348740","length":86},"id":"CVE-2026-45328-6e9597cd","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-45328-7069ab9f","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/components/tee_ota_ops/esp_tee_ota_ops.c"},"deprecated":false,"digest":{"line_hashes":["186637848761953063145763839389977597096","275938434839660328995706447160313482735","76553149807437493202996993610533947333","221723198154608087139200189238618946304"],"threshold":0.9}},{"deprecated":false,"digest":{"length":427,"function_hash":"221986285490819012608861958697474149094"},"id":"CVE-2026-45328-74c2091d","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_program_page"}},{"id":"CVE-2026-45328-75463b27","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_sha_block"},"deprecated":false,"digest":{"function_hash":"232552840595138608872062541276044332981","length":107}},{"digest":{"line_hashes":["227657605161246802334359074133188249311","309347575207434126786854231581854089777","162013745865881399461282369914826136297","155911692936289697244062125260198339961","259402792237631932817976871648821881307","227657605161246802334359074133188249311","309347575207434126786854231581854089777","162013745865881399461282369914826136297","155911692936289697244062125260198339961","259402792237631932817976871648821881307","227657605161246802334359074133188249311","309347575207434126786854231581854089777","162013745865881399461282369914826136297","155911692936289697244062125260198339961","259402792237631932817976871648821881307","227657605161246802334359074133188249311","309347575207434126786854231581854089777","162013745865881399461282369914826136297","155911692936289697244062125260198339961","259402792237631932817976871648821881307","93285727189992489464427883400903677131","32798568290502969602557680885603266423","40245338381117295131934480131775603472","70499051964044188882457645832283758828","126317629108340972586234451308556234679","227657605161246802334359074133188249311","309347575207434126786854231581854089777","162013745865881399461282369914826136297","155911692936289697244062125260198339961","259402792237631932817976871648821881307","272860493138436952565028575143593271780","260707404386057392112705722746212771902","75400817353303278993061916071420402586","237077802897524759884063616725821473211","68083432606367573660277956724381157107","272667501733416391757838733000504222114","106084408473336494793402988035362344206","189715441446877677242437137648067096265","112763037947700643545971038545538762345","72541109799895909549157051211552189116","278975732450196822392837406825035124835","86972117840086068760296220000834869140","122877437752474558289010868587265135698","178118431424121272950616748383493096334","317417996895109283627699486845869416037","158837059348151063340840241852481425273","77900603047241292040443569843762428076","18774962818057917158357072925861743473","139152984816137507393950751130951896697","231687840069463963184428407520958095294","137762464015826228281214753371198162652","65464315969268471980736552926675321042","61991648796497890255060592665198937051","320099998660135783200824844666075614097","329544241963909069325749795414877780017","201623761411241321183354520613078126853","75748408919712093818035408198074402747","313186347448549376671324809016536298044","30103629211944726439899245616852891494","302033031132809053555119689759005687848","93378497168229351399520447943946072884","258771121839594552126686788217007503312","95246992825394481999394294871785585519","105699065944549422838070729022950628273","76932010778241929812907432165064977680","191564316331040455270765427135397160519","11927914821191578228687534023816899295","158626611659967286839907621395295354180","273614688180942100944830366087784538847","256148326040256977477698165151066334712","49672903990833466562092980398926155391","48985626793218379705310281216938295126","248855252504150377774216548641241089400","44481470730721859681224986059147508526","142353755902171917054437009654222559011","15695026823218062652520045748423377840","277872258029657916494027508676821624595","183493042084957460217425240756961424786","2394687961089309085316661024548380895","304817424783457260950188399721615785355","38319177000567458541326239903498022143","143063865716628474810388544567660929501","233724195214861261257761129892064066323","83194993599505026717159026857671371945","327666947658036478573787144117755226633","112098506839293868189232543448307952350","337784235489609341193695514120959495103","326706986059025237167884815510753873763","287480835276576937753924538733023824829","198225637936451119492956108849330197647","330307488376020683264767172625353125722","5487886151474879217373255707482031246","57612399414356485249734573759974453661","310033321741589023689458338471126463124","334139434884814305937372626941678421105","176048929885222971614369501227456094776","154677349147258723405300161582037879325","235172409261793405065310809575676218064","296749360704139334359472707011752117837","306902656012568877904245946842344705588","212507455487243157794713677292932423217","324479859380577410738535752408519142043","277945609850028680315160053512254788743","19116323957500278804801439868249972603","45600226903108142807259980404697609932","300777666365035899838825196852197340659","186169630803937253773330644554038466421","23426040596979307498990126875836449718","34588315208747866782642073872464535468","75006010700817072077720101025805860558","134583324289169678169088233987598570759","69511505606834297260324281457269874116"],"threshold":0.9},"id":"CVE-2026-45328-758df542","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"246524466716360441320773295697201392648","length":116},"id":"CVE-2026-45328-7787efb3","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/common/multi_heap.c","function":"multi_heap_assert"}},{"digest":{"length":255,"function_hash":"64536371713713204430212105578224459757"},"id":"CVE-2026-45328-7e1054b8","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_erase_sector"},"deprecated":false},{"target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_ecc_point_multiply"},"deprecated":false,"digest":{"function_hash":"306026328898128159234097001515352707409","length":313},"id":"CVE-2026-45328-7f09ced7","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_sha"},"deprecated":false,"digest":{"function_hash":"141612044916264207801854615773971973164","length":331},"id":"CVE-2026-45328-8416efa5","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"229839935718288322898163463422272738480","length":123},"id":"CVE-2026-45328-842cb879","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_wdt_hal_init"}},{"id":"CVE-2026-45328-86aacea1","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_memspi_host_flush_cache"},"deprecated":false,"digest":{"function_hash":"228742677665624739622986632387128211594","length":203}},{"deprecated":false,"digest":{"function_hash":"243809610467646845018511880169869022533","length":531},"id":"CVE-2026-45328-8a742ab6","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_ds_sign"}},{"target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_hmac_calculate"},"deprecated":false,"digest":{"function_hash":"253221290435779754925298427055025792303","length":551},"id":"CVE-2026-45328-8df776fd","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"function":"_ss_esp_sha_read_digest_state","file":"components/esp_tee/subproject/main/core/esp_secure_services.c"},"deprecated":false,"digest":{"function_hash":"184037060194043114744803408213478638284","length":79},"id":"CVE-2026-45328-910102da","signature_type":"Function"},{"digest":{"function_hash":"305148560463794313365999651028358570527","length":64},"id":"CVE-2026-45328-91317c67","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_check_status"},"deprecated":false},{"target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_program_page"},"deprecated":false,"digest":{"length":427,"function_hash":"221986285490819012608861958697474149094"},"id":"CVE-2026-45328-9193e2a5","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/components/tee_ota_ops/esp_tee_ota_ops.c","function":"esp_tee_ota_write"},"deprecated":false,"digest":{"function_hash":"175069993103929722896936475206424603136","length":818},"id":"CVE-2026-45328-934ae193"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_hmac_jtag_enable"},"deprecated":false,"digest":{"function_hash":"198550884093557428608222885047777027990","length":409},"id":"CVE-2026-45328-93da9ddf"},{"id":"CVE-2026-45328-946c56f4","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_esp_tee_sec_storage_aead_encrypt"},"deprecated":false,"digest":{"function_hash":"160424937026025048216756743004864194465","length":779}},{"deprecated":false,"digest":{"function_hash":"95351206766206192551875129322006160420","length":452},"id":"CVE-2026-45328-94b970bc","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"function":"_ss_esp_aes_crypt_ofb","file":"components/esp_tee/subproject/main/core/esp_secure_services.c"}},{"digest":{"function_hash":"5858636670878277444883578759503465571","length":333},"id":"CVE-2026-45328-962ac6a1","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_common_command"},"deprecated":false},{"deprecated":false,"digest":{"length":463,"function_hash":"146584827923362271112638520038684131534"},"id":"CVE-2026-45328-9662a4b1","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_sha_dma"}},{"deprecated":false,"digest":{"function_hash":"241409007330209431147378823599981387625","length":182},"id":"CVE-2026-45328-96a03fa1","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_psa_initial_attest_get_token_size"}},{"target":{"file":"components/esp_tee/subproject/main/common/multi_heap.c"},"deprecated":false,"digest":{"line_hashes":["175858594811677782431503023722432476094","131630921575358928994058125685856460780","15908588244074761831049838149364145922","127178942594319200756991301987176968299","168615428499289416017660387409639575435"],"threshold":0.9},"id":"CVE-2026-45328-97da78fd","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6"},{"digest":{"function_hash":"117433597587519446598280648739031280761","length":450},"id":"CVE-2026-45328-98a4c879","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_aes_crypt_cfb8"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_psa_initial_attest_get_token"},"deprecated":false,"digest":{"function_hash":"301528459072009130556111333637016274234","length":573},"id":"CVE-2026-45328-9943b06d","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"290273743467552009310262483972200228384","length":94},"id":"CVE-2026-45328-9a6352d9","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_supports_direct_write"}},{"deprecated":false,"digest":{"function_hash":"243809610467646845018511880169869022533","length":531},"id":"CVE-2026-45328-9a7c9bd6","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_ds_sign"}},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_hmac_calculate"},"deprecated":false,"digest":{"function_hash":"253221290435779754925298427055025792303","length":551},"id":"CVE-2026-45328-9d7ffc5e","signature_type":"Function"},{"target":{"function":"_ss_esp_tee_ota_write","file":"components/esp_tee/subproject/main/core/esp_secure_services.c"},"deprecated":false,"digest":{"function_hash":"261525811991496363322672714585696835004","length":272},"id":"CVE-2026-45328-9dd0d938","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_ds_encrypt_params_using_key_type"},"deprecated":false,"digest":{"length":639,"function_hash":"35949869139746048084804144535195281358"},"id":"CVE-2026-45328-9ec699e4"},{"source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_ds_encrypt_params"},"deprecated":false,"digest":{"length":617,"function_hash":"280701531613231092228395990342381962603"},"id":"CVE-2026-45328-9ff5bba2","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"229839935718288322898163463422272738480","length":123},"id":"CVE-2026-45328-a08ccc51","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_wdt_hal_init"}},{"deprecated":false,"digest":{"line_hashes":["169079003700963788881292517166479641032","223738166604245136099086145270248183263","160448650674320302306656249389597484059","180234815418628393812679074575410414027"],"threshold":0.9},"id":"CVE-2026-45328-a247b515","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/440a5d1906502023f2a0fb0aecbdf0602d14acbf","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_service_table.c"}},{"source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_mmu_hal_paddr_to_vaddr"},"deprecated":false,"digest":{"length":236,"function_hash":"84435900469094295083652786997219026431"},"id":"CVE-2026-45328-a3b9168f","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_aes_crypt_ctr"},"deprecated":false,"digest":{"function_hash":"65190414740433961034322449208763377646","length":490},"id":"CVE-2026-45328-a461ed8c","signature_type":"Function"},{"digest":{"function_hash":"184037060194043114744803408213478638284","length":79},"id":"CVE-2026-45328-a47a8220","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_sha_read_digest_state"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"267909448837731289281934636931134888842","length":474},"id":"CVE-2026-45328-a5305aba","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_aes_crypt_cfb128"}},{"digest":{"function_hash":"253221290435779754925298427055025792303","length":551},"id":"CVE-2026-45328-a79533a6","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_hmac_calculate"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_mmu_hal_vaddr_to_paddr"},"deprecated":false,"digest":{"length":216,"function_hash":"26111237731698604278276945993972540361"},"id":"CVE-2026-45328-a802b6e3"},{"source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_sha"},"deprecated":false,"digest":{"function_hash":"141612044916264207801854615773971973164","length":331},"id":"CVE-2026-45328-a837a402","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["186637848761953063145763839389977597096","275938434839660328995706447160313482735","76553149807437493202996993610533947333","221723198154608087139200189238618946304"],"threshold":0.9},"id":"CVE-2026-45328-af04c7bc","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/components/tee_ota_ops/esp_tee_ota_ops.c"}},{"source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_erase_block"},"deprecated":false,"digest":{"function_hash":"847157273715919315975975117732995954","length":235},"id":"CVE-2026-45328-b0de98cb","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["330664118489061391736400372809865372836","173465907516237228001141276239039176179","11403253774134510325954060494888462577","246797853339348591608170989686115584162","157789404149273655162301452573559296586","303200302654806278897313721660710845054","106789108972673407858566081835160337616","54363335438470798193418802559073151246","238483817896013330648731570367782840129","30851576294422901886143346073403006342","19062842662198554069237968113056886822"],"threshold":0.9},"id":"CVE-2026-45328-b706bf6b","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/include/esp_tee_memory_utils.h"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"277160443927421792188967348988515719223","length":446},"id":"CVE-2026-45328-b9b15208","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_read"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_read"},"deprecated":false,"digest":{"function_hash":"277160443927421792188967348988515719223","length":446},"id":"CVE-2026-45328-ba0cebbd"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_set_write_protect"},"deprecated":false,"digest":{"function_hash":"148531830299181059324652930051072348740","length":86},"id":"CVE-2026-45328-bb02610b","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"302293931358700619908268541645030386668","length":533},"id":"CVE-2026-45328-bb1f8529","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_ds_start_sign"}},{"source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_set_write_protect"},"deprecated":false,"digest":{"function_hash":"148531830299181059324652930051072348740","length":86},"id":"CVE-2026-45328-be7d1fed","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"160424937026025048216756743004864194465","length":779},"id":"CVE-2026-45328-bf1311a7","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_esp_tee_sec_storage_aead_encrypt"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"95351206766206192551875129322006160420","length":452},"id":"CVE-2026-45328-c0c41120","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_aes_crypt_ofb"}},{"deprecated":false,"digest":{"function_hash":"306026328898128159234097001515352707409","length":313},"id":"CVE-2026-45328-c0d8d927","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"function":"_ss_esp_ecc_point_multiply","file":"components/esp_tee/subproject/main/core/esp_secure_services.c"}},{"deprecated":false,"digest":{"line_hashes":["315140927608339237213381478876632809070","281926397812571851163025824999033106278","326234253325873253894430295671987482992","270120180783258617724650808414358743736","157660549986654981909090679954512448861","297870928663164770064879605942934370210","56332303444068541500081529497362177607","40780087060968779716328109236627312050","32685572497715544142216721530110178025","63514592010264105328520901313442218585","94664861146055377073831247664294704880","155933941215619011603905307281830517405","2933606638493024713361786244874097769","232736137501768896739599994853151001679","328621857408547548510831893843788564312"],"threshold":0.9},"id":"CVE-2026-45328-c37abb41","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/test_apps/tee_test_fw/main/test_esp_tee_sec_stg.c"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c"},"deprecated":false,"digest":{"line_hashes":["41377518701661586260173707772440887291","315715852581871858195573833729102272496","163450079851195794973664534804067577753","118693892719630814823270473195131043573","227657605161246802334359074133188249311","309347575207434126786854231581854089777","162013745865881399461282369914826136297","155911692936289697244062125260198339961","259402792237631932817976871648821881307","227657605161246802334359074133188249311","309347575207434126786854231581854089777","162013745865881399461282369914826136297","155911692936289697244062125260198339961","259402792237631932817976871648821881307","227657605161246802334359074133188249311","309347575207434126786854231581854089777","162013745865881399461282369914826136297","155911692936289697244062125260198339961","259402792237631932817976871648821881307","227657605161246802334359074133188249311","309347575207434126786854231581854089777","162013745865881399461282369914826136297","155911692936289697244062125260198339961","259402792237631932817976871648821881307","93285727189992489464427883400903677131","32798568290502969602557680885603266423","40245338381117295131934480131775603472","70499051964044188882457645832283758828","126317629108340972586234451308556234679","227657605161246802334359074133188249311","309347575207434126786854231581854089777","162013745865881399461282369914826136297","155911692936289697244062125260198339961","259402792237631932817976871648821881307","37778161543885274734671519937120795795","249971004709279868042009998008644599787","110182310158059797837809102972243975597","149225252540418144105916073508421406124","237077802897524759884063616725821473211","68083432606367573660277956724381157107","272667501733416391757838733000504222114","106084408473336494793402988035362344206","189715441446877677242437137648067096265","112763037947700643545971038545538762345","72541109799895909549157051211552189116","278975732450196822392837406825035124835","86972117840086068760296220000834869140","122877437752474558289010868587265135698","178118431424121272950616748383493096334","317417996895109283627699486845869416037","158837059348151063340840241852481425273","77900603047241292040443569843762428076","18774962818057917158357072925861743473","139152984816137507393950751130951896697","231687840069463963184428407520958095294","137762464015826228281214753371198162652","65464315969268471980736552926675321042","61991648796497890255060592665198937051","320099998660135783200824844666075614097","329544241963909069325749795414877780017","201623761411241321183354520613078126853","75748408919712093818035408198074402747","102657822574713210112329624539574049889","30103629211944726439899245616852891494","302033031132809053555119689759005687848","93378497168229351399520447943946072884","258771121839594552126686788217007503312","95246992825394481999394294871785585519","105699065944549422838070729022950628273","76932010778241929812907432165064977680","191564316331040455270765427135397160519","195173753815480676462970293781542666437","205908435787044043416857598367695390756","21647695828531333431073320071642163050","133309826631540499775595604751610860763","256148326040256977477698165151066334712","49672903990833466562092980398926155391","48985626793218379705310281216938295126","248855252504150377774216548641241089400","44481470730721859681224986059147508526","142353755902171917054437009654222559011","15695026823218062652520045748423377840","277872258029657916494027508676821624595","183493042084957460217425240756961424786","2394687961089309085316661024548380895","304817424783457260950188399721615785355","38319177000567458541326239903498022143","143063865716628474810388544567660929501","233724195214861261257761129892064066323","83194993599505026717159026857671371945","327666947658036478573787144117755226633","112098506839293868189232543448307952350","337784235489609341193695514120959495103","326706986059025237167884815510753873763","287480835276576937753924538733023824829","198225637936451119492956108849330197647","330307488376020683264767172625353125722","5487886151474879217373255707482031246","216733481785972319249751847388698491132","160853819200322170291570775402017706","121496057312801172208110134654319219032","301810604399832075383333622130394035252","128793424810777908950139486453465700042","21659902727855655749602110159419973430","191804479227981373375210598624134328030","5487886151474879217373255707482031246","216733481785972319249751847388698491132","160853819200322170291570775402017706","121496057312801172208110134654319219032","301810604399832075383333622130394035252","128793424810777908950139486453465700042","149551397188652088192785547252828787762","154677349147258723405300161582037879325","235172409261793405065310809575676218064","296749360704139334359472707011752117837","306902656012568877904245946842344705588","212507455487243157794713677292932423217","324479859380577410738535752408519142043","277945609850028680315160053512254788743","26668540342342737774548095177562704326","45600226903108142807259980404697609932","300777666365035899838825196852197340659","186169630803937253773330644554038466421","23426040596979307498990126875836449718","34588315208747866782642073872464535468","75006010700817072077720101025805860558","134583324289169678169088233987598570759","69511505606834297260324281457269874116","127179307582888630599752032311620685882","333602313961053271656386604648857847085","67422983866444379855814811235557032343","125588542549300484461197398926963223656","174392527954108582079996612394789807789","211895668777446568014231625112008752309","210070515352900074073195285011548260448","235511088623951413583752306298285967372","268451969427165536899843929121454468097","79873928132938429023009793467430850418","191377222089544245075164279779912577168","302653922870949698964080113871592781401","92896351948499449298651074689421459807"],"threshold":0.9},"id":"CVE-2026-45328-c40912bb"},{"deprecated":false,"digest":{"function_hash":"327090567935506191312782166294518084069","length":396},"id":"CVE-2026-45328-c4b384d2","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_bootloader_flash_execute_command_common"}},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_set_write_protect"},"deprecated":false,"digest":{"length":86,"function_hash":"148531830299181059324652930051072348740"},"id":"CVE-2026-45328-c5481dc6","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_supports_direct_write"},"deprecated":false,"digest":{"function_hash":"290273743467552009310262483972200228384","length":94},"id":"CVE-2026-45328-c5c3a5f9","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"243809610467646845018511880169869022533","length":531},"id":"CVE-2026-45328-c5d888c7","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_ds_sign"}},{"deprecated":false,"digest":{"length":450,"function_hash":"117433597587519446598280648739031280761"},"id":"CVE-2026-45328-c62dd045","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_aes_crypt_cbc"}},{"id":"CVE-2026-45328-cb53e8d2","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_ds_start_sign"},"deprecated":false,"digest":{"function_hash":"302293931358700619908268541645030386668","length":533}},{"deprecated":false,"digest":{"function_hash":"294149026051254522061079534716755691497","length":341},"id":"CVE-2026-45328-cc5ca47d","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/include/esp_tee_memory_utils.h","function":"esp_tee_ptr_in_ree"}},{"id":"CVE-2026-45328-d02b075d","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_supports_direct_read"},"deprecated":false,"digest":{"function_hash":"290273743467552009310262483972200228384","length":94}},{"source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_chip_generic_config_host_io_mode"},"deprecated":false,"digest":{"function_hash":"148531830299181059324652930051072348740","length":86},"id":"CVE-2026-45328-d31f535c","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"65190414740433961034322449208763377646","length":490},"id":"CVE-2026-45328-d3eaab4e","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_aes_crypt_ctr"}},{"target":{"file":"components/esp_tee/subproject/main/core/esp_secure_service_table.c"},"deprecated":false,"digest":{"line_hashes":["169079003700963788881292517166479641032","223738166604245136099086145270248183263","160448650674320302306656249389597484059","180234815418628393812679074575410414027"],"threshold":0.9},"id":"CVE-2026-45328-d640a14a","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/afd14ab113acd0ca369965404c99ac42e74d4fcd"},{"id":"CVE-2026-45328-d6855698","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_sha"},"deprecated":false,"digest":{"function_hash":"141612044916264207801854615773971973164","length":331}},{"deprecated":false,"digest":{"function_hash":"47766972182221147886865638819676648064","length":319},"id":"CVE-2026-45328-d93165ef","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"function":"_ss_esp_ds_finish_sign","file":"components/esp_tee/subproject/main/core/esp_secure_services.c"}},{"source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"function":"_ss_esp_tee_sec_storage_ecdsa_get_pubkey","file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c"},"deprecated":false,"digest":{"length":285,"function_hash":"179832527434112388112768876014717635026"},"id":"CVE-2026-45328-da5af944","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"267909448837731289281934636931134888842","length":474},"id":"CVE-2026-45328-dfbf50c5","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_aes_crypt_cfb128"}},{"id":"CVE-2026-45328-e00e7d63","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_mmu_hal_map_region"},"deprecated":false,"digest":{"function_hash":"183634096378577029396003366696508965579","length":405}},{"deprecated":false,"digest":{"function_hash":"290273743467552009310262483972200228384","length":94},"id":"CVE-2026-45328-e0826fb0","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_supports_direct_read"}},{"digest":{"function_hash":"198550884093557428608222885047777027990","length":409},"id":"CVE-2026-45328-e0f92eab","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_hmac_jtag_enable"},"deprecated":false},{"target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_bootloader_flash_execute_command_common"},"deprecated":false,"digest":{"function_hash":"327090567935506191312782166294518084069","length":396},"id":"CVE-2026-45328-e1fd1ad4","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b"},{"target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_sha_read_digest_state"},"deprecated":false,"digest":{"function_hash":"184037060194043114744803408213478638284","length":79},"id":"CVE-2026-45328-e2f67cef","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f"},{"id":"CVE-2026-45328-e34a81fb","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_esp_tee_sec_storage_ecdsa_get_pubkey"},"deprecated":false,"digest":{"function_hash":"179832527434112388112768876014717635026","length":285}},{"id":"CVE-2026-45328-e73c59a4","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_aes_crypt_ecb"},"deprecated":false,"digest":{"function_hash":"195357006254119007416041420604791084814","length":394}},{"id":"CVE-2026-45328-ea1b7647","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_memspi_host_flush_cache"},"deprecated":false,"digest":{"function_hash":"228742677665624739622986632387128211594","length":203}},{"source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c"},"deprecated":false,"digest":{"line_hashes":["40475364596708170310066163220064098402","844183067832131361579226701967074356","90837304570995490932517008006259439266","43124415952018555883131585319890569759","29468871790500236081422314219485223056","310783280756251265529216503633740957004","217213143308617297665608172714533393670","174675279832220323520748543572029087762","245126951998442292421485406355786667924","271960432864333283301904253809265209939","4472710446093545944854735036299879414","127241999504988438438458588731976407927","191186236172428241814206655999432669293","13013618659941319574356491094097354776","56890641369846557167353292699180310811","241172354030419077543241532760395834805","227325875729919749470618325390312000414","246768938004522920383064612506640423242","339245066703615483784245859638666773656","290654223411547049556978480971377707271","63578649393956540163421060044583557918","93840978487025027730868917417477142381","216343873034120578781415796259337864724","11203298587206850833585563264539028425","247217814991383788784906876616116832568","117993732448875710859761950364916846824","252162585249333465648427138540538053563","149012148209967215887859445456676358396","234038625006222300393502291659703604112","324404118304754660495459207056533985707","26302405162494046451906359465073259185","154111490079351941546922703582616740820","148688815889306428773874348865690929461","16182610963845012506258691366372338597","184980503536398220923983672433499185693","21416017389986994456849622029706778455","268884147375969448741666198561513124549","247217814991383788784906876616116832568","117993732448875710859761950364916846824","252162585249333465648427138540538053563","149012148209967215887859445456676358396","234038625006222300393502291659703604112","324404118304754660495459207056533985707","26302405162494046451906359465073259185","154111490079351941546922703582616740820","148688815889306428773874348865690929461","16182610963845012506258691366372338597","184980503536398220923983672433499185693","206839187527142638901807028546369622678","112529227477207716986437030233526403768","134796566749769269658637073060914098670","19687223828382109859457644656670271903","200310666584340912513230440118610187662","189724308093330918089538344630365350047","153140940095445910333020837277433563529","269663334013966182074039061304120636391","188918929777599613153905401771622263389","210879857421522672642573461061349891983","309542178477698488492911451573026919529","80023569787312012133030242297258283545","232011650053993482535965827437009424657","337079203139414328840508781904824186610","88246365372158899606902807210483203642","239906689352177578097804065608376756883","129573096929462382428607637338372037199","203421936451039119659039503372890525458","86610778969413797237369039616844817988","176490723555422012689343360974892658566","80302161015333584789354900678841686641","178916496483858975429443044080202109061","107120969233133531144157250200930433004","10508150390454847125116649149304661998","285054805325677437176026922962529941753","263893837258881441555624359429958504107","207491022690038531446576018635017217082","228700308144745832674125344482489435227","224635625566817710542932177047267327249","62508113415805934047552568884238693566","66618087002144974660902722770795599571","156244676276712855198895936071392257479","262729984301065537611295097329690034167","304424559060147560449331583671179130186","187376134014859542970409390758564957701","149119625988958600893363264576268994328","47151567190721239495226633921569958776","72953382138274242102012938037383282004","159499796457830250130698925726025504114","169407808264649440224783158300643272787","177637024898403522809013764744178523064","60557174308731322744184504915107774805","57004071906104613819247490294502335445","277972363028900620300210978432512377205","233534234539558768961764537686250640938","120964110697902661021988131491567744253","100063538658715128708798593318606020576","40548758599749479190791093607363185227","111413152428028895034858142635084119158","103768153337180559631299760286115662130","176584393700949256963792424270840892446","96965394524666174032768644872226014293","223638632695206949900804210075283773869","45780420184685485565044647167794092235","49349137188221029820651636381569983233","319420662144570865804805569440593908988","211254357656768230942691696849840417213","316346235607789777842556260670141518301","60491984171504712358573402656666864381","164119520718585196489758132011853949976","156883564763652923911139060504885419217","86409542714179840978413066235832616391","214262918075978586647638800863564325043","15001173529868018833485631684964891751","301719556391848804070379409690134490352","324587869477214951329401874621744379099","120256618499798790757846048570189635043","207830950991560740419060386761159788633","197454404892881834488579920487415460872","56121993914710468034913664108482162761","209825694001219710151784401592885305776","10349133726724360656562572225075248214","89596549563494561771018047415368712657","274371666757532531898214146653817918812","90383693061177029020001155719617385595","168002022645030216925173234096761409859","120256618499798790757846048570189635043","207830950991560740419060386761159788633","309705300518220643310592178306478422307","23684273775972484886138074384736503178","316123102619581750034405251847427993433","55082325397223501176403937615557369911","246341054711435618352566172449454568345","284656917275139254409742404707819306386","118111724872238012127565888373249772824","8910661790318391837937137911995725104","329745287592631893096686803092768245363","284707344347448458053258677354075526510","126130478837488320229224462880911988650","99565028245735113531528209857438861810","208540125134282793755290608769127912666","153243100976715191755675636841179406329","99201040286162324442577806279332326903","239650855710934943411658919893401940037","109174718384118463445575697909682604378","311896862964302690411484515644664216131","23015157405566035364602252423909815485","264246452977720486596969352774817650700","199634893112334772740028500709661963538","286603283716028339842040865584998122650","23178910158268877546163426178891645303","215398573403733504636176548586559274737","124081747436876665967371543310093556782","118049759476020700961733913632609936204","311654867132070190603309187258525817572","234288697548758336373302213242595478270","56381139663140375196627448176364277743","6648552910833172592378973991937265289","208330856753781858003471227731497674065","290289466665999709809850510151489685909","192309891670712228514098843888326811725","111825585893557909753839575670115630029","235361471030198144066133440475179903144","159145401833170633489131873061854718995","251944081967483363045370193400461706545","128437302509500207881167471453599823684","51993912474362239491752475580816769277","3540269454055646868566928825044784343","11825093658337100409357484352075268373","229344783470975633597433871055152947852","222425611796167141504570559974135462808","26357158655018517206862049397600140934","59061238708102354211040062946660983191","315628191281694992014381970047413783330","77026472147631324656919749756245657672","157224051732482942337150358723560302259","185948575155826961620286183467761182997","33865188987455987759326577924696133695","132984444355140690904509583965613004046","264334950449219438589396171153727711295","315969100422305726308865005733637308048","44666091733248328036355822671140914469","308706508333355589760153278227813593228","309428718546715635454334405941610375278","260334283116974600884126477590282764409","69215672758086507962230466542084874490","167802274441021758533926567743362991929","299525353795094270378492325031447737815","248092708002032213527617538279762632230","40522638289901578952205882740469498179","92616643247114301890014241103469166237","146951955044302291472671800415257860128","203659778222165884296023838560585256487","284265616264764661184694073006963751619","67477626105595881121108916806039033341","58924393459968150399436100483512483677","250260825750778276804715595316072641876","258197069745863592335578838499471968395","213001715752494630069164852453011676327","141524140751494236432010963126055478530","30517122265411441421206455809415735116","137017202300729926293762618609529667072","231021704375184415248277766874400267550","81117909768419521127924780028205395397","17235978794505346274907209920000156989","165867785977192695883214330203389160806","166643104161288745696894861335641929354","36169350469437093332644804375753098324","52245712052178349267619601384018352394","90818487859624512597952257029244248381","297712950769859214491055557554163896145"],"threshold":0.9},"id":"CVE-2026-45328-ed12ce17","signature_type":"Line","signature_version":"v1"},{"target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_esp_tee_sec_storage_aead_encrypt"},"deprecated":false,"digest":{"function_hash":"164793760159929617014539231835930893926","length":758},"id":"CVE-2026-45328-edd5498b","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6"},{"id":"CVE-2026-45328-edd5cbab","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_ds_finish_sign"},"deprecated":false,"digest":{"function_hash":"47766972182221147886865638819676648064","length":319}},{"id":"CVE-2026-45328-ee648a45","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"function":"_ss_esp_tee_sec_storage_ecdsa_sign_pbkdf2","file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c"},"deprecated":false,"digest":{"function_hash":"308741724757485086015913247449767214223","length":676}},{"source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_erase_block"},"deprecated":false,"digest":{"length":235,"function_hash":"847157273715919315975975117732995954"},"id":"CVE-2026-45328-ef5d7d71","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-45328-f0587463","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c"},"deprecated":false,"digest":{"line_hashes":["41377518701661586260173707772440887291","315715852581871858195573833729102272496","163450079851195794973664534804067577753","118693892719630814823270473195131043573","227657605161246802334359074133188249311","309347575207434126786854231581854089777","162013745865881399461282369914826136297","155911692936289697244062125260198339961","259402792237631932817976871648821881307","227657605161246802334359074133188249311","309347575207434126786854231581854089777","162013745865881399461282369914826136297","155911692936289697244062125260198339961","259402792237631932817976871648821881307","227657605161246802334359074133188249311","309347575207434126786854231581854089777","162013745865881399461282369914826136297","155911692936289697244062125260198339961","259402792237631932817976871648821881307","227657605161246802334359074133188249311","309347575207434126786854231581854089777","162013745865881399461282369914826136297","155911692936289697244062125260198339961","259402792237631932817976871648821881307","93285727189992489464427883400903677131","32798568290502969602557680885603266423","40245338381117295131934480131775603472","70499051964044188882457645832283758828","126317629108340972586234451308556234679","227657605161246802334359074133188249311","309347575207434126786854231581854089777","162013745865881399461282369914826136297","155911692936289697244062125260198339961","259402792237631932817976871648821881307","37778161543885274734671519937120795795","249971004709279868042009998008644599787","110182310158059797837809102972243975597","149225252540418144105916073508421406124","237077802897524759884063616725821473211","68083432606367573660277956724381157107","272667501733416391757838733000504222114","106084408473336494793402988035362344206","189715441446877677242437137648067096265","112763037947700643545971038545538762345","72541109799895909549157051211552189116","278975732450196822392837406825035124835","86972117840086068760296220000834869140","122877437752474558289010868587265135698","178118431424121272950616748383493096334","317417996895109283627699486845869416037","158837059348151063340840241852481425273","77900603047241292040443569843762428076","18774962818057917158357072925861743473","139152984816137507393950751130951896697","231687840069463963184428407520958095294","137762464015826228281214753371198162652","65464315969268471980736552926675321042","61991648796497890255060592665198937051","320099998660135783200824844666075614097","329544241963909069325749795414877780017","201623761411241321183354520613078126853","75748408919712093818035408198074402747","102657822574713210112329624539574049889","30103629211944726439899245616852891494","302033031132809053555119689759005687848","93378497168229351399520447943946072884","258771121839594552126686788217007503312","95246992825394481999394294871785585519","105699065944549422838070729022950628273","76932010778241929812907432165064977680","191564316331040455270765427135397160519","195173753815480676462970293781542666437","205908435787044043416857598367695390756","21647695828531333431073320071642163050","133309826631540499775595604751610860763","256148326040256977477698165151066334712","49672903990833466562092980398926155391","48985626793218379705310281216938295126","248855252504150377774216548641241089400","44481470730721859681224986059147508526","142353755902171917054437009654222559011","15695026823218062652520045748423377840","277872258029657916494027508676821624595","183493042084957460217425240756961424786","2394687961089309085316661024548380895","304817424783457260950188399721615785355","38319177000567458541326239903498022143","143063865716628474810388544567660929501","233724195214861261257761129892064066323","83194993599505026717159026857671371945","327666947658036478573787144117755226633","112098506839293868189232543448307952350","337784235489609341193695514120959495103","326706986059025237167884815510753873763","287480835276576937753924538733023824829","198225637936451119492956108849330197647","330307488376020683264767172625353125722","5487886151474879217373255707482031246","216733481785972319249751847388698491132","160853819200322170291570775402017706","121496057312801172208110134654319219032","301810604399832075383333622130394035252","128793424810777908950139486453465700042","21659902727855655749602110159419973430","191804479227981373375210598624134328030","5487886151474879217373255707482031246","216733481785972319249751847388698491132","160853819200322170291570775402017706","121496057312801172208110134654319219032","301810604399832075383333622130394035252","128793424810777908950139486453465700042","149551397188652088192785547252828787762","154677349147258723405300161582037879325","235172409261793405065310809575676218064","296749360704139334359472707011752117837","306902656012568877904245946842344705588","212507455487243157794713677292932423217","324479859380577410738535752408519142043","277945609850028680315160053512254788743","26668540342342737774548095177562704326","45600226903108142807259980404697609932","300777666365035899838825196852197340659","186169630803937253773330644554038466421","23426040596979307498990126875836449718","34588315208747866782642073872464535468","75006010700817072077720101025805860558","134583324289169678169088233987598570759","69511505606834297260324281457269874116","127179307582888630599752032311620685882","333602313961053271656386604648857847085","67422983866444379855814811235557032343","125588542549300484461197398926963223656","174392527954108582079996612394789807789","211895668777446568014231625112008752309","210070515352900074073195285011548260448","235511088623951413583752306298285967372","268451969427165536899843929121454468097","79873928132938429023009793467430850418","191377222089544245075164279779912577168","302653922870949698964080113871592781401","92896351948499449298651074689421459807"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"290273743467552009310262483972200228384","length":94},"id":"CVE-2026-45328-f0866ec3","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_setup_read_suspend"}},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_aes_crypt_cbc"},"deprecated":false,"digest":{"function_hash":"117433597587519446598280648739031280761","length":450},"id":"CVE-2026-45328-f6a341cd","signature_type":"Function"},{"id":"CVE-2026-45328-f731ca0c","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_mmu_hal_vaddr_to_paddr"},"deprecated":false,"digest":{"length":216,"function_hash":"26111237731698604278276945993972540361"}},{"source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/components/tee_ota_ops/esp_tee_ota_ops.c","function":"esp_tee_ota_write"},"deprecated":false,"digest":{"function_hash":"175069993103929722896936475206424603136","length":818},"id":"CVE-2026-45328-f8ef0608","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_aes_crypt_cfb8"},"deprecated":false,"digest":{"function_hash":"117433597587519446598280648739031280761","length":450},"id":"CVE-2026-45328-fab84ef1"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f","target":{"file":"components/esp_tee/subproject/main/common/multi_heap.c"},"deprecated":false,"digest":{"line_hashes":["175858594811677782431503023722432476094","131630921575358928994058125685856460780","15908588244074761831049838149364145922","127178942594319200756991301987176968299","168615428499289416017660387409639575435"],"threshold":0.9},"id":"CVE-2026-45328-fbd545b5","signature_type":"Line"},{"digest":{"length":64,"function_hash":"305148560463794313365999651028358570527"},"id":"CVE-2026-45328-fe003632","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services_iram.c","function":"_ss_spi_flash_hal_check_status"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"261525811991496363322672714585696835004","length":272},"id":"CVE-2026-45328-fe583a58","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6","target":{"file":"components/esp_tee/subproject/main/core/esp_secure_services.c","function":"_ss_esp_tee_ota_write"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"}]}