{"id":"CVE-2026-55687","summary":"ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing","details":"ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Versions 6.0.1, 5.5.4, 5.4.4, 5.3.5, and possibly prior contain an out-of-bounds write in jpeg_parse_dqt_marker() in components/esp_driver_jpeg/jpeg_parse_marker.c because the attacker-controlled DQT marker Tq nibble is used as an index into the qt_tbl array without validating that it is in the range 0..3, allowing malformed JPEG input to corrupt stack memory and reliably trigger a denial of service. This issue is fixed in version 6.0.2 and is expected to be fixed in versions 5.5.5, 5.4.5, and 5.3.6.","aliases":["GHSA-v6r2-f6p2-88cj"],"modified":"2026-08-12T16:41:23.414919Z","published":"2026-07-10T15:59:31.646Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-121","CWE-787"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55687.json"},"references":[{"type":"WEB","url":"https://github.com/espressif/esp-idf/releases/tag/v6.0.2"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55687.json"},{"type":"ADVISORY","url":"https://github.com/espressif/esp-idf/security/advisories/GHSA-v6r2-f6p2-88cj"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55687"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2"},{"type":"FIX","url":"https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/espressif/esp-idf","events":[{"introduced":"0"},{"fixed":"303c01305acb8ae5c4eb24a1786300681b4822a4"},{"fixed":"6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77"},{"fixed":"7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1"},{"fixed":"82c5c2dad45313786fb7e973059bc9094d95c3b2"},{"fixed":"f2df45bcedef11354e83c31a9718d680a68422c4"},{"fixed":"7101770dc6db2667b3c477cc31365dd1acd6db4e"}],"database_specific":{"extracted_events":[{"introduced":"6.0.0"},{"fixed":"6.0.2"},{"introduced":"5.5.0"},{"last_affected":"5.5.4"},{"introduced":"5.4.0"},{"last_affected":"5.4.4"},{"introduced":"0"},{"last_affected":"5.3.5"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["v5.4-beta2","v5.3","v5.3-rc1","v5.3-beta2","v5.3-beta1","v5.2-dev","v5.0-beta1","v5.0-dev","v4.3-beta1","v4.3-dev","v4.2-dev","v4.1-dev","v4.0-dev","v3.3-beta2","v3.3-beta1","v3.2-beta1","v3.3-dev","v3.1-beta1","v3.2-dev","v3.1-dev","v2.1-rc1","v3.0-dev","v2.0-rc1","v1.0","v0.9"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55687.json","vanir_signatures_modified":"2026-08-12T16:41:23Z","vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4","target":{"file":"components/esp_driver_jpeg/jpeg_decode.c","function":"jpeg_decoder_get_info"},"deprecated":false,"digest":{"function_hash":"69694885694968196691929174141064083169","length":1486},"id":"CVE-2026-55687-0747e78a"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77","target":{"file":"components/esp_driver_jpeg/jpeg_private.h"},"deprecated":false,"digest":{"line_hashes":["274285629202364722089337070333232601455","73653623164700201186992235063811005692","119494969391069433888075168664304163336","137784318747514579467605757014932616034"],"threshold":0.9},"id":"CVE-2026-55687-0a32c369","signature_type":"Line"},{"digest":{"length":2411,"function_hash":"195567810159066831615448989914195237633"},"id":"CVE-2026-55687-0c95dc9c","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1","target":{"file":"components/esp_driver_jpeg/jpeg_decode.c","function":"jpeg_parse_marker"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["175916023877827809882774644020473221186","116909910456720503439151783500449097220","336075348487365554208073648033766046348","118046066335227515523968204029327030252","338047657776486039675653286780954120459","191926082019561248051820543457943476314","253141956513705890079533789536958227066","186436367613822611357656043619356312985","162652152949599252021203348358539792230","63838847544760543707714345001672452241","216065827589910275210194566977404777931","88663770750880621931013853152476969713","333303835978860514770210313987466192518","320963006809066173065449023381559988197","153958193492557908910772145666268199041","249984519296316013243784382723480258267","171512205483367213372359885434589218209","178596872851515838695787790845921861716","222899816357221725926313748857406448913","100127773383716460315991159344392778196","141757672308743120943997281449982710002","272544368593836318623335703946934453550","271238653349718681206061585728714255113","10926098858521638104419893249358361973","111785113296853457102049216676975247862","199479093322781514298012503125601497059","203521396145601893988684671838708929094","202422109376842348640873390971512352396","107270020619693118073553662679238817807","113095650294129776529291610275576352358","61407259004397122248993514633267342680","146925084460222831584730387052562063851","25037684323648576653787275233513730463","254840216456374375918280020963278042948","63033232070539410540781854929917870085","241906837373362366769805886921565362958","233166945453704563100398363604100316377","102827496558113210966456366369709667403","6415447344284959637119566951884114075","35039805703045215194778322087947541298","299576898021064615646084569434167211530","327208145409637031796646252109142149580","235884273835591218756587560217345993723","118895377894830322967493129330035567618","37485517269199603705431336256053669944","86613991652025899004311097013009091892","38704198886757457554634318364309806748","269842606545103969998981737954439849019","175822172920830798473261630560074494333","315433905084623754977358878654813412594","148048017482095158010523401103650176776","252019412124664097703921656180207664656","117163456213337109432074963305823942752","302224754355686924886166110357905919370","127074236311658190739565135101767396023","308023470595051761259331277894697979539","586138518933078720222714035020700850","96343192873010407016183428277130966015","258100139738127969097015453790895060212","323458598771763220166311075301134520835","203667551698472996168682557138401880056","261011466937145208718694133752248175798","120116144984066396627618395491525577471","214409059984687519749862892612676425481","238547179549127894598060263284445616305","186491062417453097738783750131228465457","241546235612823744950431192524907243253","228771756015206058437068030299852521769","327834858832790058014435192738551095373","284872027674864222903657690393860359514","283876716769219929365081605524277609038","279589716810071318962100652608766940595","319470734019518412035316123636260575855","280384665502583971761653224129680855473","180884474978799820626542903594821564818","174896909327146808710353595543476081624","259619748200830182007144031996817294284","194010446256391207177942268955148352146","206232805711676453109044498741540400442","32456263872069356123342586683131915057","35952904096580135278624324921616346147","225017210628595911938869191718837774880","205900495083782155466898127190105699704","156433879730322936976833066657300797215","224404555985263708060353609051846011167","88200226681434429880985960981692089623"],"threshold":0.9},"id":"CVE-2026-55687-0d5da1c0","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c"}},{"id":"CVE-2026-55687-1204e1b8","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4","target":{"file":"components/esp_driver_jpeg/jpeg_decode.c","function":"jpeg_decoder_get_info"},"deprecated":false,"digest":{"function_hash":"69694885694968196691929174141064083169","length":1486}},{"deprecated":false,"digest":{"function_hash":"146846598182245131488296382525405519528","length":473},"id":"CVE-2026-55687-122fa34f","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_com_marker"}},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4","target":{"file":"components/esp_driver_jpeg/jpeg_decode.c"},"deprecated":false,"digest":{"line_hashes":["136830592330769264422398975329913876709","156996467658622061955048332572133819021","63557824660786172557290985148197371946","262268961389249084111143379204244847189","320349282242598402502986066768909814922","139512609884743970663862830926591406021","241688751505847296990392626440151981296","133841861774418705314693677705838591543","141785491948590848713265943085734971725","26858230063993009086038619929775919719","41643865667957817615925949347038326386","329554164291684290277296157350590796478","37492963983163057386492662517736231656","172234242299594505836725960910276790801","270066604924916840427396095522222494909","186514039017817704225085627095827759286","25715308801902100851393797844571741343","312316156161002719657746449031488171698","150652522894754807484125856963067387086","105125327466358596346523685789042548302","138714585379348258563404858832914165824","225527212820893069716208436047148460671","304747496165435766700200566627237780317","230718294824534901350113032110373962607","6158515405346841126734234648955405440","295722562859503251515548219062571597793","162662257262211916521994923331843789044","42806603098708378815093502546537292206","287817909238592365145061105233903523278","305306879698102437989907157924473954848","169218413297867799176048293576508482551","267434640337594413557573888012707126737","279776699847576861862370625146086333395","235572004011702485029617990201287537930","79480331471328110735765938377181750306","220427639229579414119458012203616883301","269448169816757451732252677106906542416","133222764263576812072619583574714565418","134531465196421963669244289162287802970","157387553733051840787650951655994331092","166347437778374353419082302849008260014","160845786774585032163375256281648567320","241887073648810343407820833132073297461","317100890888580433496910013351975569892","163465544269640714122207621646000078594","199219909948393599880308925751008917745","173758799867903414299670769123055292234","333380275595501062971256238214220616100","278451993756959140041633168347233562800","111216747668659909436746520252905838737","97714330759700113548436459623934001337","236009327882013844454289237107206904044","264546572539963457139831348745890677216","233246503130328968784024451567204180487","236981676999951824909684446808986201838","223616379243750470243840122731087669982","234183203748696875746361545865937902172","7378977817898750802621909717860451964","190137585021695344200039510447916260087","280757495026438826218151989779468133778","222711981462045635052788576896039294263"],"threshold":0.9},"id":"CVE-2026-55687-12c5a8e2","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_appn_marker"},"deprecated":false,"digest":{"function_hash":"223061305894760272750031821087229208559","length":414},"id":"CVE-2026-55687-17eb7ae8"},{"id":"CVE-2026-55687-195c2028","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4","target":{"file":"components/esp_driver_jpeg/jpeg_decode.c","function":"jpeg_parse_marker"},"deprecated":false,"digest":{"function_hash":"195567810159066831615448989914195237633","length":2411}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77","target":{"function":"jpeg_decoder_get_info","file":"components/esp_driver_jpeg/jpeg_decode.c"},"deprecated":false,"digest":{"length":1486,"function_hash":"69694885694968196691929174141064083169"},"id":"CVE-2026-55687-1a420996"},{"deprecated":false,"digest":{"length":907,"function_hash":"275011043250446438921571484106770588299"},"id":"CVE-2026-55687-27a5bd15","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_dqt_marker"}},{"id":"CVE-2026-55687-35df83b8","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4","target":{"function":"jpeg_parse_dht_marker","file":"components/esp_driver_jpeg/jpeg_parse_marker.c"},"deprecated":false,"digest":{"function_hash":"195664296962233585768717315824024815888","length":963}},{"deprecated":false,"digest":{"line_hashes":["175916023877827809882774644020473221186","116909910456720503439151783500449097220","336075348487365554208073648033766046348","178273769586418919448789973501564096927","150778541597429541175179440029202421708","133593004599467841507523342056774779158","303182931326311317671503342809450155260","186436367613822611357656043619356312985","162652152949599252021203348358539792230","286075957458208143840293930574374858923","153052854737973250731413721867943283897","21907771718801404801394088877234022281","78382386745664981930080534719036090759","192139401034600077673398064527594403172","23212243125603288737764110230044207337","249984519296316013243784382723480258267","260299158754985020796892108075974161052","74072511261018572849324209967635983171","249662659603336457525239450790387898757","237681703918411775910818720238773890901","141757672308743120943997281449982710002","272544368593836318623335703946934453550","250984810255017974959247080123609478537","52986661785199949751386538646385711836","106720514103495299468513726852403526771","175282433262989346282046574822817291827","337563351420798772956632121844164301907","322064073192689039448717147523932837888","142272075999801555691126097080939659195","17788040111560999600603810539953608185","197715409795671767174465675399903469220","50209818975080860243827448462201678261","169476967072610345306124007682197314220","23294144106221732177985443624450479218","63033232070539410540781854929917870085","241906837373362366769805886921565362958","233166945453704563100398363604100316377","102827496558113210966456366369709667403","6415447344284959637119566951884114075","35039805703045215194778322087947541298","299576898021064615646084569434167211530","327208145409637031796646252109142149580","235884273835591218756587560217345993723","118895377894830322967493129330035567618","37485517269199603705431336256053669944","86613991652025899004311097013009091892","38704198886757457554634318364309806748","269842606545103969998981737954439849019","175822172920830798473261630560074494333","315433905084623754977358878654813412594","148048017482095158010523401103650176776","252019412124664097703921656180207664656","117163456213337109432074963305823942752","302224754355686924886166110357905919370","127074236311658190739565135101767396023","308023470595051761259331277894697979539","586138518933078720222714035020700850","96343192873010407016183428277130966015","258100139738127969097015453790895060212","323458598771763220166311075301134520835","203667551698472996168682557138401880056","57530297313664765355844731409692735720","78007373125828724733657033040168299725","136061843251824000894828906679339049715","324422482077940893488617777626400302764","186491062417453097738783750131228465457","241546235612823744950431192524907243253","228771756015206058437068030299852521769","327834858832790058014435192738551095373","284872027674864222903657690393860359514","283876716769219929365081605524277609038","279589716810071318962100652608766940595","319470734019518412035316123636260575855","209447463535563157952490804374126366933","210568641663212646567291797465145100245","5585954672262793302587052337683907819","190158219880035127053268206679287281801","194010446256391207177942268955148352146","206232805711676453109044498741540400442","32456263872069356123342586683131915057","35952904096580135278624324921616346147","225017210628595911938869191718837774880","205900495083782155466898127190105699704","156433879730322936976833066657300797215","224404555985263708060353609051846011167","88200226681434429880985960981692089623"],"threshold":0.9},"id":"CVE-2026-55687-361222ba","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c"}},{"target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_dht_marker"},"deprecated":false,"digest":{"function_hash":"183009578596031628157510925747539139551","length":997},"id":"CVE-2026-55687-36e5121c","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77"},{"target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_dht_marker"},"deprecated":false,"digest":{"function_hash":"183009578596031628157510925747539139551","length":997},"id":"CVE-2026-55687-5041d9b2","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4"},{"deprecated":false,"digest":{"function_hash":"195567810159066831615448989914195237633","length":2411},"id":"CVE-2026-55687-5426a83b","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77","target":{"file":"components/esp_driver_jpeg/jpeg_decode.c","function":"jpeg_parse_marker"}},{"deprecated":false,"digest":{"function_hash":"69694885694968196691929174141064083169","length":1486},"id":"CVE-2026-55687-565fa486","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2","target":{"function":"jpeg_decoder_get_info","file":"components/esp_driver_jpeg/jpeg_decode.c"}},{"source":"https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1","target":{"file":"components/esp_driver_jpeg/jpeg_private.h"},"deprecated":false,"digest":{"line_hashes":["274285629202364722089337070333232601455","73653623164700201186992235063811005692","119494969391069433888075168664304163336","137784318747514579467605757014932616034"],"threshold":0.9},"id":"CVE-2026-55687-57f284d4","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"length":473,"function_hash":"146846598182245131488296382525405519528"},"id":"CVE-2026-55687-5a495840","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77","target":{"function":"jpeg_parse_com_marker","file":"components/esp_driver_jpeg/jpeg_parse_marker.c"}},{"digest":{"function_hash":"205951942902697279196359945232255926155","length":288},"id":"CVE-2026-55687-5bdf10a2","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_dri_marker"},"deprecated":false},{"id":"CVE-2026-55687-64e3070b","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2","target":{"file":"components/esp_driver_jpeg/jpeg_decode.c"},"deprecated":false,"digest":{"line_hashes":["136830592330769264422398975329913876709","156996467658622061955048332572133819021","63557824660786172557290985148197371946","262268961389249084111143379204244847189","320349282242598402502986066768909814922","139512609884743970663862830926591406021","241688751505847296990392626440151981296","133841861774418705314693677705838591543","141785491948590848713265943085734971725","26858230063993009086038619929775919719","41643865667957817615925949347038326386","329554164291684290277296157350590796478","37492963983163057386492662517736231656","172234242299594505836725960910276790801","270066604924916840427396095522222494909","186514039017817704225085627095827759286","25715308801902100851393797844571741343","312316156161002719657746449031488171698","150652522894754807484125856963067387086","105125327466358596346523685789042548302","138714585379348258563404858832914165824","225527212820893069716208436047148460671","304747496165435766700200566627237780317","230718294824534901350113032110373962607","6158515405346841126734234648955405440","295722562859503251515548219062571597793","162662257262211916521994923331843789044","42806603098708378815093502546537292206","287817909238592365145061105233903523278","305306879698102437989907157924473954848","169218413297867799176048293576508482551","267434640337594413557573888012707126737","279776699847576861862370625146086333395","235572004011702485029617990201287537930","79480331471328110735765938377181750306","220427639229579414119458012203616883301","269448169816757451732252677106906542416","133222764263576812072619583574714565418","66811869005456870961603246861930215971","6534246800148363590166485545594583188","166347437778374353419082302849008260014","160845786774585032163375256281648567320","241887073648810343407820833132073297461","317100890888580433496910013351975569892","163465544269640714122207621646000078594","199219909948393599880308925751008917745","173758799867903414299670769123055292234","333380275595501062971256238214220616100","278451993756959140041633168347233562800","111216747668659909436746520252905838737","97714330759700113548436459623934001337","236009327882013844454289237107206904044","264546572539963457139831348745890677216","233246503130328968784024451567204180487","236981676999951824909684446808986201838","223616379243750470243840122731087669982","234183203748696875746361545865937902172","7378977817898750802621909717860451964","190137585021695344200039510447916260087","280757495026438826218151989779468133778","222711981462045635052788576896039294263"],"threshold":0.9}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c"},"deprecated":false,"digest":{"line_hashes":["175916023877827809882774644020473221186","116909910456720503439151783500449097220","336075348487365554208073648033766046348","178273769586418919448789973501564096927","150778541597429541175179440029202421708","133593004599467841507523342056774779158","303182931326311317671503342809450155260","186436367613822611357656043619356312985","162652152949599252021203348358539792230","286075957458208143840293930574374858923","153052854737973250731413721867943283897","21907771718801404801394088877234022281","78382386745664981930080534719036090759","192139401034600077673398064527594403172","23212243125603288737764110230044207337","249984519296316013243784382723480258267","260299158754985020796892108075974161052","74072511261018572849324209967635983171","249662659603336457525239450790387898757","237681703918411775910818720238773890901","141757672308743120943997281449982710002","272544368593836318623335703946934453550","250984810255017974959247080123609478537","52986661785199949751386538646385711836","106720514103495299468513726852403526771","175282433262989346282046574822817291827","337563351420798772956632121844164301907","322064073192689039448717147523932837888","142272075999801555691126097080939659195","17788040111560999600603810539953608185","197715409795671767174465675399903469220","50209818975080860243827448462201678261","169476967072610345306124007682197314220","23294144106221732177985443624450479218","63033232070539410540781854929917870085","241906837373362366769805886921565362958","233166945453704563100398363604100316377","102827496558113210966456366369709667403","6415447344284959637119566951884114075","35039805703045215194778322087947541298","299576898021064615646084569434167211530","327208145409637031796646252109142149580","235884273835591218756587560217345993723","118895377894830322967493129330035567618","37485517269199603705431336256053669944","86613991652025899004311097013009091892","38704198886757457554634318364309806748","269842606545103969998981737954439849019","175822172920830798473261630560074494333","315433905084623754977358878654813412594","148048017482095158010523401103650176776","252019412124664097703921656180207664656","117163456213337109432074963305823942752","302224754355686924886166110357905919370","127074236311658190739565135101767396023","308023470595051761259331277894697979539","586138518933078720222714035020700850","96343192873010407016183428277130966015","258100139738127969097015453790895060212","323458598771763220166311075301134520835","203667551698472996168682557138401880056","57530297313664765355844731409692735720","78007373125828724733657033040168299725","136061843251824000894828906679339049715","324422482077940893488617777626400302764","186491062417453097738783750131228465457","241546235612823744950431192524907243253","228771756015206058437068030299852521769","327834858832790058014435192738551095373","284872027674864222903657690393860359514","283876716769219929365081605524277609038","279589716810071318962100652608766940595","319470734019518412035316123636260575855","209447463535563157952490804374126366933","210568641663212646567291797465145100245","5585954672262793302587052337683907819","190158219880035127053268206679287281801","194010446256391207177942268955148352146","206232805711676453109044498741540400442","32456263872069356123342586683131915057","35952904096580135278624324921616346147","225017210628595911938869191718837774880","205900495083782155466898127190105699704","156433879730322936976833066657300797215","224404555985263708060353609051846011167","88200226681434429880985960981692089623"],"threshold":0.9},"id":"CVE-2026-55687-723baa56"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4","target":{"file":"components/esp_driver_jpeg/jpeg_decode.c"},"deprecated":false,"digest":{"line_hashes":["302283741079978687692284853680114863599","136830592330769264422398975329913876709","156996467658622061955048332572133819021","63557824660786172557290985148197371946","262268961389249084111143379204244847189","320349282242598402502986066768909814922","139512609884743970663862830926591406021","241688751505847296990392626440151981296","133841861774418705314693677705838591543","141785491948590848713265943085734971725","26858230063993009086038619929775919719","41643865667957817615925949347038326386","329554164291684290277296157350590796478","37492963983163057386492662517736231656","172234242299594505836725960910276790801","270066604924916840427396095522222494909","186514039017817704225085627095827759286","25715308801902100851393797844571741343","312316156161002719657746449031488171698","150652522894754807484125856963067387086","105125327466358596346523685789042548302","138714585379348258563404858832914165824","225527212820893069716208436047148460671","304747496165435766700200566627237780317","230718294824534901350113032110373962607","6158515405346841126734234648955405440","295722562859503251515548219062571597793","162662257262211916521994923331843789044","42806603098708378815093502546537292206","287817909238592365145061105233903523278","305306879698102437989907157924473954848","169218413297867799176048293576508482551","267434640337594413557573888012707126737","279776699847576861862370625146086333395","235572004011702485029617990201287537930","79480331471328110735765938377181750306","220427639229579414119458012203616883301","269448169816757451732252677106906542416","133222764263576812072619583574714565418","66811869005456870961603246861930215971","6534246800148363590166485545594583188","166347437778374353419082302849008260014","160845786774585032163375256281648567320","241887073648810343407820833132073297461","317100890888580433496910013351975569892","163465544269640714122207621646000078594","199219909948393599880308925751008917745","173758799867903414299670769123055292234","333380275595501062971256238214220616100","278451993756959140041633168347233562800","111216747668659909436746520252905838737","97714330759700113548436459623934001337","236009327882013844454289237107206904044","264546572539963457139831348745890677216","233246503130328968784024451567204180487","236981676999951824909684446808986201838","223616379243750470243840122731087669982","234183203748696875746361545865937902172","7378977817898750802621909717860451964","190137585021695344200039510447916260087","280757495026438826218151989779468133778","222711981462045635052788576896039294263"],"threshold":0.9},"id":"CVE-2026-55687-777a1f71","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"187721385409611263691601070233785857523","length":282},"id":"CVE-2026-55687-82b22c0f","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_dri_marker"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c"},"deprecated":false,"digest":{"line_hashes":["175916023877827809882774644020473221186","116909910456720503439151783500449097220","336075348487365554208073648033766046348","178273769586418919448789973501564096927","150778541597429541175179440029202421708","133593004599467841507523342056774779158","303182931326311317671503342809450155260","186436367613822611357656043619356312985","162652152949599252021203348358539792230","286075957458208143840293930574374858923","153052854737973250731413721867943283897","21907771718801404801394088877234022281","78382386745664981930080534719036090759","192139401034600077673398064527594403172","23212243125603288737764110230044207337","249984519296316013243784382723480258267","260299158754985020796892108075974161052","74072511261018572849324209967635983171","249662659603336457525239450790387898757","237681703918411775910818720238773890901","141757672308743120943997281449982710002","272544368593836318623335703946934453550","250984810255017974959247080123609478537","52986661785199949751386538646385711836","106720514103495299468513726852403526771","175282433262989346282046574822817291827","337563351420798772956632121844164301907","322064073192689039448717147523932837888","142272075999801555691126097080939659195","17788040111560999600603810539953608185","197715409795671767174465675399903469220","50209818975080860243827448462201678261","169476967072610345306124007682197314220","23294144106221732177985443624450479218","63033232070539410540781854929917870085","241906837373362366769805886921565362958","233166945453704563100398363604100316377","102827496558113210966456366369709667403","6415447344284959637119566951884114075","35039805703045215194778322087947541298","299576898021064615646084569434167211530","327208145409637031796646252109142149580","235884273835591218756587560217345993723","118895377894830322967493129330035567618","37485517269199603705431336256053669944","86613991652025899004311097013009091892","38704198886757457554634318364309806748","269842606545103969998981737954439849019","175822172920830798473261630560074494333","315433905084623754977358878654813412594","148048017482095158010523401103650176776","252019412124664097703921656180207664656","117163456213337109432074963305823942752","302224754355686924886166110357905919370","127074236311658190739565135101767396023","308023470595051761259331277894697979539","586138518933078720222714035020700850","96343192873010407016183428277130966015","258100139738127969097015453790895060212","323458598771763220166311075301134520835","203667551698472996168682557138401880056","57530297313664765355844731409692735720","78007373125828724733657033040168299725","136061843251824000894828906679339049715","324422482077940893488617777626400302764","186491062417453097738783750131228465457","241546235612823744950431192524907243253","228771756015206058437068030299852521769","327834858832790058014435192738551095373","284872027674864222903657690393860359514","283876716769219929365081605524277609038","279589716810071318962100652608766940595","319470734019518412035316123636260575855","209447463535563157952490804374126366933","210568641663212646567291797465145100245","5585954672262793302587052337683907819","190158219880035127053268206679287281801","194010446256391207177942268955148352146","206232805711676453109044498741540400442","32456263872069356123342586683131915057","35952904096580135278624324921616346147","225017210628595911938869191718837774880","205900495083782155466898127190105699704","156433879730322936976833066657300797215","224404555985263708060353609051846011167","88200226681434429880985960981692089623"],"threshold":0.9},"id":"CVE-2026-55687-93708958"},{"digest":{"function_hash":"311375445205577778781703948269314115792","length":839},"id":"CVE-2026-55687-9602b2da","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_dqt_marker"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_dqt_marker"},"deprecated":false,"digest":{"function_hash":"275011043250446438921571484106770588299","length":907},"id":"CVE-2026-55687-9bd86d92","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_appn_marker"},"deprecated":false,"digest":{"function_hash":"113979112561149162958240121140423842594","length":475},"id":"CVE-2026-55687-9e8112b3","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"116012087218698718096759928913050717544","length":440},"id":"CVE-2026-55687-a4211a91","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_com_marker"}},{"digest":{"function_hash":"113979112561149162958240121140423842594","length":475},"id":"CVE-2026-55687-a58980e8","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_appn_marker"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_dqt_marker"},"deprecated":false,"digest":{"length":907,"function_hash":"275011043250446438921571484106770588299"},"id":"CVE-2026-55687-af154935"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2","target":{"file":"components/esp_driver_jpeg/jpeg_private.h"},"deprecated":false,"digest":{"line_hashes":["274285629202364722089337070333232601455","73653623164700201186992235063811005692","119494969391069433888075168664304163336","137784318747514579467605757014932616034"],"threshold":0.9},"id":"CVE-2026-55687-afd21d7f","signature_type":"Line"},{"id":"CVE-2026-55687-b0f6df60","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_appn_marker"},"deprecated":false,"digest":{"function_hash":"204543725057186960513049616750024274428","length":442}},{"source":"https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_sof_marker"},"deprecated":false,"digest":{"function_hash":"224690942387500678291028108202281839528","length":1400},"id":"CVE-2026-55687-b13e164d","signature_type":"Function","signature_version":"v1"},{"target":{"function":"jpeg_parse_dht_marker","file":"components/esp_driver_jpeg/jpeg_parse_marker.c"},"deprecated":false,"digest":{"function_hash":"195664296962233585768717315824024815888","length":963},"id":"CVE-2026-55687-b27cd75e","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1"},{"id":"CVE-2026-55687-b99b741f","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_dht_marker"},"deprecated":false,"digest":{"length":997,"function_hash":"183009578596031628157510925747539139551"}},{"digest":{"function_hash":"205951942902697279196359945232255926155","length":288},"id":"CVE-2026-55687-ba23c8c1","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_dri_marker"},"deprecated":false},{"target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_com_marker"},"deprecated":false,"digest":{"length":412,"function_hash":"81241478057366009316851145487009668342"},"id":"CVE-2026-55687-ba3b2b45","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1"},{"signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_sof_marker"},"deprecated":false,"digest":{"function_hash":"11612485010539244172516253809338505700","length":1362},"id":"CVE-2026-55687-bdbb3c2a","signature_type":"Function"},{"digest":{"line_hashes":["175916023877827809882774644020473221186","116909910456720503439151783500449097220","336075348487365554208073648033766046348","118046066335227515523968204029327030252","338047657776486039675653286780954120459","132881208750346664305475092834230812870","281302321782917917216733698997414149579","186436367613822611357656043619356312985","162652152949599252021203348358539792230","63838847544760543707714345001672452241","216065827589910275210194566977404777931","163036178005194157921814577542761520879","60180728607812121411464508802542976943","275186649609175855729186566519524120319","224727939331119567032432413841013772762","249984519296316013243784382723480258267","171512205483367213372359885434589218209","178596872851515838695787790845921861716","222899816357221725926313748857406448913","100127773383716460315991159344392778196","141757672308743120943997281449982710002","272544368593836318623335703946934453550","271238653349718681206061585728714255113","10926098858521638104419893249358361973","111785113296853457102049216676975247862","199479093322781514298012503125601497059","203521396145601893988684671838708929094","202422109376842348640873390971512352396","107270020619693118073553662679238817807","113095650294129776529291610275576352358","61407259004397122248993514633267342680","146925084460222831584730387052562063851","25037684323648576653787275233513730463","254840216456374375918280020963278042948","63033232070539410540781854929917870085","241906837373362366769805886921565362958","233166945453704563100398363604100316377","102827496558113210966456366369709667403","6415447344284959637119566951884114075","35039805703045215194778322087947541298","299576898021064615646084569434167211530","327208145409637031796646252109142149580","235884273835591218756587560217345993723","118895377894830322967493129330035567618","37485517269199603705431336256053669944","86613991652025899004311097013009091892","38704198886757457554634318364309806748","269842606545103969998981737954439849019","175822172920830798473261630560074494333","315433905084623754977358878654813412594","148048017482095158010523401103650176776","252019412124664097703921656180207664656","117163456213337109432074963305823942752","302224754355686924886166110357905919370","127074236311658190739565135101767396023","308023470595051761259331277894697979539","586138518933078720222714035020700850","96343192873010407016183428277130966015","258100139738127969097015453790895060212","323458598771763220166311075301134520835","203667551698472996168682557138401880056","261011466937145208718694133752248175798","120116144984066396627618395491525577471","214409059984687519749862892612676425481","238547179549127894598060263284445616305","186491062417453097738783750131228465457","241546235612823744950431192524907243253","228771756015206058437068030299852521769","327834858832790058014435192738551095373","284872027674864222903657690393860359514","283876716769219929365081605524277609038","279589716810071318962100652608766940595","319470734019518412035316123636260575855","280384665502583971761653224129680855473","180884474978799820626542903594821564818","174896909327146808710353595543476081624","259619748200830182007144031996817294284","194010446256391207177942268955148352146","206232805711676453109044498741540400442","32456263872069356123342586683131915057","84857571550966907458144538803762593305","82803032316365749015288801457805556808","320372871646659156860119204863711751871","28536942343892755717106575375398473895","224404555985263708060353609051846011167","88200226681434429880985960981692089623"],"threshold":0.9},"id":"CVE-2026-55687-cabd56b9","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c"},"deprecated":false},{"target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_sof_marker"},"deprecated":false,"digest":{"function_hash":"11612485010539244172516253809338505700","length":1362},"id":"CVE-2026-55687-cbb89a24","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77"},{"deprecated":false,"digest":{"function_hash":"69694885694968196691929174141064083169","length":1486},"id":"CVE-2026-55687-ce2dc52e","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1","target":{"function":"jpeg_decoder_get_info","file":"components/esp_driver_jpeg/jpeg_decode.c"}},{"source":"https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_sof_marker"},"deprecated":false,"digest":{"function_hash":"224690942387500678291028108202281839528","length":1400},"id":"CVE-2026-55687-cef92880","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-55687-cfaeb18c","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2","target":{"file":"components/esp_driver_jpeg/jpeg_decode.c","function":"jpeg_parse_marker"},"deprecated":false,"digest":{"function_hash":"195567810159066831615448989914195237633","length":2411}},{"deprecated":false,"digest":{"line_hashes":["274285629202364722089337070333232601455","73653623164700201186992235063811005692","119494969391069433888075168664304163336","137784318747514579467605757014932616034"],"threshold":0.9},"id":"CVE-2026-55687-d3224e05","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4","target":{"file":"components/esp_driver_jpeg/jpeg_private.h"}},{"id":"CVE-2026-55687-dbec33a1","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77","target":{"file":"components/esp_driver_jpeg/jpeg_decode.c"},"deprecated":false,"digest":{"line_hashes":["136830592330769264422398975329913876709","156996467658622061955048332572133819021","63557824660786172557290985148197371946","262268961389249084111143379204244847189","320349282242598402502986066768909814922","139512609884743970663862830926591406021","241688751505847296990392626440151981296","133841861774418705314693677705838591543","141785491948590848713265943085734971725","26858230063993009086038619929775919719","41643865667957817615925949347038326386","329554164291684290277296157350590796478","37492963983163057386492662517736231656","172234242299594505836725960910276790801","270066604924916840427396095522222494909","186514039017817704225085627095827759286","25715308801902100851393797844571741343","312316156161002719657746449031488171698","150652522894754807484125856963067387086","105125327466358596346523685789042548302","138714585379348258563404858832914165824","225527212820893069716208436047148460671","304747496165435766700200566627237780317","230718294824534901350113032110373962607","6158515405346841126734234648955405440","295722562859503251515548219062571597793","162662257262211916521994923331843789044","42806603098708378815093502546537292206","287817909238592365145061105233903523278","305306879698102437989907157924473954848","169218413297867799176048293576508482551","267434640337594413557573888012707126737","279776699847576861862370625146086333395","235572004011702485029617990201287537930","79480331471328110735765938377181750306","220427639229579414119458012203616883301","269448169816757451732252677106906542416","133222764263576812072619583574714565418","134531465196421963669244289162287802970","157387553733051840787650951655994331092","166347437778374353419082302849008260014","160845786774585032163375256281648567320","241887073648810343407820833132073297461","317100890888580433496910013351975569892","163465544269640714122207621646000078594","199219909948393599880308925751008917745","173758799867903414299670769123055292234","333380275595501062971256238214220616100","278451993756959140041633168347233562800","111216747668659909436746520252905838737","97714330759700113548436459623934001337","236009327882013844454289237107206904044","264546572539963457139831348745890677216","233246503130328968784024451567204180487","236981676999951824909684446808986201838","223616379243750470243840122731087669982","234183203748696875746361545865937902172","7378977817898750802621909717860451964","190137585021695344200039510447916260087","280757495026438826218151989779468133778","222711981462045635052788576896039294263"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"311375445205577778781703948269314115792","length":839},"id":"CVE-2026-55687-de051f0c","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_dqt_marker"}},{"digest":{"function_hash":"146846598182245131488296382525405519528","length":473},"id":"CVE-2026-55687-e3cf4f18","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_com_marker"},"deprecated":false},{"source":"https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4","target":{"file":"components/esp_driver_jpeg/jpeg_decode.c","function":"jpeg_parse_marker"},"deprecated":false,"digest":{"function_hash":"195567810159066831615448989914195237633","length":2411},"id":"CVE-2026-55687-e6b2241a","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"11612485010539244172516253809338505700","length":1362},"id":"CVE-2026-55687-eba4c7bc","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2","target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_sof_marker"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1","target":{"function":"jpeg_parse_dri_marker","file":"components/esp_driver_jpeg/jpeg_parse_marker.c"},"deprecated":false,"digest":{"function_hash":"205951942902697279196359945232255926155","length":288},"id":"CVE-2026-55687-ef3efea1"},{"id":"CVE-2026-55687-f00d3933","signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4","target":{"file":"components/esp_driver_jpeg/jpeg_private.h"},"deprecated":false,"digest":{"line_hashes":["274285629202364722089337070333232601455","73653623164700201186992235063811005692","119494969391069433888075168664304163336","137784318747514579467605757014932616034"],"threshold":0.9}},{"target":{"function":"jpeg_parse_appn_marker","file":"components/esp_driver_jpeg/jpeg_parse_marker.c"},"deprecated":false,"digest":{"function_hash":"113979112561149162958240121140423842594","length":475},"id":"CVE-2026-55687-f9ee9a63","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1","target":{"file":"components/esp_driver_jpeg/jpeg_decode.c"},"deprecated":false,"digest":{"line_hashes":["302283741079978687692284853680114863599","136830592330769264422398975329913876709","156996467658622061955048332572133819021","63557824660786172557290985148197371946","262268961389249084111143379204244847189","320349282242598402502986066768909814922","139512609884743970663862830926591406021","241688751505847296990392626440151981296","133841861774418705314693677705838591543","141785491948590848713265943085734971725","26858230063993009086038619929775919719","41643865667957817615925949347038326386","329554164291684290277296157350590796478","37492963983163057386492662517736231656","172234242299594505836725960910276790801","270066604924916840427396095522222494909","186514039017817704225085627095827759286","25715308801902100851393797844571741343","312316156161002719657746449031488171698","150652522894754807484125856963067387086","105125327466358596346523685789042548302","138714585379348258563404858832914165824","225527212820893069716208436047148460671","304747496165435766700200566627237780317","230718294824534901350113032110373962607","6158515405346841126734234648955405440","295722562859503251515548219062571597793","162662257262211916521994923331843789044","42806603098708378815093502546537292206","287817909238592365145061105233903523278","305306879698102437989907157924473954848","169218413297867799176048293576508482551","267434640337594413557573888012707126737","279776699847576861862370625146086333395","235572004011702485029617990201287537930","79480331471328110735765938377181750306","220427639229579414119458012203616883301","269448169816757451732252677106906542416","133222764263576812072619583574714565418","66811869005456870961603246861930215971","6534246800148363590166485545594583188","166347437778374353419082302849008260014","160845786774585032163375256281648567320","241887073648810343407820833132073297461","317100890888580433496910013351975569892","163465544269640714122207621646000078594","199219909948393599880308925751008917745","173758799867903414299670769123055292234","333380275595501062971256238214220616100","278451993756959140041633168347233562800","111216747668659909436746520252905838737","97714330759700113548436459623934001337","236009327882013844454289237107206904044","264546572539963457139831348745890677216","233246503130328968784024451567204180487","236981676999951824909684446808986201838","223616379243750470243840122731087669982","234183203748696875746361545865937902172","7378977817898750802621909717860451964","190137585021695344200039510447916260087","280757495026438826218151989779468133778","222711981462045635052788576896039294263"],"threshold":0.9},"id":"CVE-2026-55687-fdefb031"},{"target":{"file":"components/esp_driver_jpeg/jpeg_parse_marker.c","function":"jpeg_parse_dri_marker"},"deprecated":false,"digest":{"function_hash":"205951942902697279196359945232255926155","length":288},"id":"CVE-2026-55687-fe0cfc64","signature_type":"Function","signature_version":"v1","source":"https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}