CVE-2018-18558 - CVE House

Back to Database

Status published Medium CVE-2018-18558

An issue was discovered in Espressif ESP-IDF 2.x and 3.x...

6.4 CVSS

Vulnerability Description

An issue was discovered in Espressif ESP-IDF 2.x and 3.x before 3.0.6 and 3.1.x before 3.1.1. Insufficient validation of input data in the 2nd stage bootloader allows a physically proximate attacker to bypass secure boot checks and execute arbitrary code, by crafting an application binary that overwrites a bootloader code segment in process_segment in components/bootloader_support/src/esp_image_format.c. The attack is effective when the flash encryption feature is not enabled, or if the attacker finds a different vulnerability that allows them to write this binary to flash memory.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-18558

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from espressif

View All →

espressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path

Espressif ESP-IDF USB Host HID (Human Interface Device) Driver Descriptor Use-After-Free Vulnerability

Espressif ESP-IDF USB Host UVC Class Driver has a stack buffer overflow in UVC descriptor printing

ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling

ESF-IDF Has Out-of-Bounds Read in ESP32 Bluetooth SDP Result Handling

Affected Vendor

espressif

View all reports →

Affected Software

esp-idf

Vulnerable Versions:

2.0, 3.1

Timeline

Official Publish: May 13th, 2019

Last Modified: August 5th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.