CVE-2025-27840

Description

Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).

Affected Platforms

Weakness Type

CWE-912, NVD-CWE-Other

References

• https://cheriot.org/auditing/backdoor/2025/03/09/no-esp32-style-backdoor.html
• https://darkmentor.com/blog/esp32_non-backdoor/
• https://flyingpenguin.com/?p=67838
• https://github.com/TarlogicSecurity/Talks/blob/main/2025_RootedCon_BluetoothTool…
• https://github.com/em0gi/CVE-2025-27840
• https://github.com/esphome/esphome/discussions/8382