CVE-2026-45328
- Source
- https://cve.org/CVERecord?id=CVE-2026-45328
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-45328.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-45328
- Aliases
-
- GHSA-mmgp-73p4-92xp
- Published
- 2026-06-10T00:33:43.997Z
- Modified
- 2026-07-26T03:40:50.610090Z
- Severity
-
- 9.3 (Critical) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
- Summary
- ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers
- Details
-
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, the esptee component exposes secure-service wrappers in espsecureservices.c and espsecureservicesiram.c that bridge calls from the user application (i.e. the REE) to TEE-protected hardware peripherals (AES, SHA, ECC, HMAC, SPI, MMU, WDT) and to the security feature like attestation, OTA updates, secure storage. This issue has been patched in versions 5.5.5 and 6.0.1.
- Database specific
{ "cwe_ids": [ "CWE-20", "CWE-787" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45328.json", "cna_assigner": "GitHub_M" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45328.json
- https://github.com/espressif/esp-idf/security/advisories/GHSA-mmgp-73p4-92xp
- https://nvd.nist.gov/vuln/detail/CVE-2026-45328
- https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f
- https://github.com/espressif/esp-idf/commit/440a5d1906502023f2a0fb0aecbdf0602d14acbf
- https://github.com/espressif/esp-idf/commit/764626a1b7c85b943d207da08a2f8f7d7f3def4d
- https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b
- https://github.com/espressif/esp-idf/commit/afd14ab113acd0ca369965404c99ac42e74d4fcd
- https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6
Affected packages
Git / github.com/espressif/esp-idf
Affected ranges
- Type
- GIT
- Repo
- https://github.com/espressif/esp-idf
- Events
-
IntroducedFixedFixedFixedFixedFixedFixed
- Database specific
{ "cpe": [ "cpe:2.3:a:espressif:esp-idf:5.5.4:*:*:*:*:*:*:*", "cpe:2.3:a:espressif:esp-idf:6.0:*:*:*:*:*:*:*" ], "source": [ "CPE_STRING", "REFERENCES" ], "extracted_events": [ { "introduced": "5.5.4" }, { "last_affected": "5.5.4" }, { "introduced": "6.0" }, { "last_affected": "6.0" } ] }
Database specific
vanir_signatures_modified
"2026-07-26T03:40:50Z"
vanir_signatures
[
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_device_config"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-01de2826",
"signature_version": "v1",
"digest": {
"function_hash": "305148560463794313365999651028358570527",
"length": 64.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_setup_read_suspend"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-031bde4c",
"signature_version": "v1",
"digest": {
"function_hash": "290273743467552009310262483972200228384",
"length": 94.0
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-034630c8",
"signature_version": "v1",
"digest": {
"line_hashes": [
"268775783363746402426002106281150673420",
"40456189074984454776262952962867141853",
"283557230448094462604617807857056100596",
"67391344783879268398466862818874279140",
"40475364596708170310066163220064098402",
"844183067832131361579226701967074356",
"90837304570995490932517008006259439266",
"43124415952018555883131585319890569759",
"29468871790500236081422314219485223056",
"310783280756251265529216503633740957004",
"217213143308617297665608172714533393670",
"174675279832220323520748543572029087762",
"245126951998442292421485406355786667924",
"271960432864333283301904253809265209939",
"4472710446093545944854735036299879414",
"127241999504988438438458588731976407927",
"191186236172428241814206655999432669293",
"13013618659941319574356491094097354776",
"56890641369846557167353292699180310811",
"241172354030419077543241532760395834805",
"227325875729919749470618325390312000414",
"246768938004522920383064612506640423242",
"339245066703615483784245859638666773656",
"290654223411547049556978480971377707271",
"63578649393956540163421060044583557918",
"93840978487025027730868917417477142381",
"91719775402753070977603497095482100111",
"105172334100217341348273892019993915413",
"107594010224914266528064355305432264499",
"38004855975537759787359631024558115642",
"193104775803760098425918426666698193930",
"210673510601435069452010560156583482620",
"41506893136461743719568698723131111265",
"5975859672693939474182176766448466765",
"92824461747257507534371935348465256719",
"154111490079351941546922703582616740820",
"148688815889306428773874348865690929461",
"16182610963845012506258691366372338597",
"184980503536398220923983672433499185693",
"179293642403227754958927034895746644810",
"135423983164784444785428505674462501809",
"107594010224914266528064355305432264499",
"38004855975537759787359631024558115642",
"193104775803760098425918426666698193930",
"210673510601435069452010560156583482620",
"41506893136461743719568698723131111265",
"5975859672693939474182176766448466765",
"92824461747257507534371935348465256719",
"154111490079351941546922703582616740820",
"148688815889306428773874348865690929461",
"16182610963845012506258691366372338597",
"184980503536398220923983672433499185693",
"206839187527142638901807028546369622678",
"112529227477207716986437030233526403768",
"134796566749769269658637073060914098670",
"19687223828382109859457644656670271903",
"200310666584340912513230440118610187662",
"189724308093330918089538344630365350047",
"153140940095445910333020837277433563529",
"269663334013966182074039061304120636391",
"188918929777599613153905401771622263389",
"210879857421522672642573461061349891983",
"309542178477698488492911451573026919529",
"80023569787312012133030242297258283545",
"232011650053993482535965827437009424657",
"337079203139414328840508781904824186610",
"88246365372158899606902807210483203642",
"239906689352177578097804065608376756883",
"129573096929462382428607637338372037199",
"203421936451039119659039503372890525458",
"86610778969413797237369039616844817988",
"176490723555422012689343360974892658566",
"80302161015333584789354900678841686641",
"178916496483858975429443044080202109061",
"107120969233133531144157250200930433004",
"10508150390454847125116649149304661998",
"285054805325677437176026922962529941753",
"263893837258881441555624359429958504107",
"207491022690038531446576018635017217082",
"228700308144745832674125344482489435227",
"224635625566817710542932177047267327249",
"62508113415805934047552568884238693566",
"66618087002144974660902722770795599571",
"156244676276712855198895936071392257479",
"262729984301065537611295097329690034167",
"304424559060147560449331583671179130186",
"187376134014859542970409390758564957701",
"149119625988958600893363264576268994328",
"47151567190721239495226633921569958776",
"72953382138274242102012938037383282004",
"159499796457830250130698925726025504114",
"169407808264649440224783158300643272787",
"177637024898403522809013764744178523064",
"60557174308731322744184504915107774805",
"57004071906104613819247490294502335445",
"277972363028900620300210978432512377205",
"233534234539558768961764537686250640938",
"120964110697902661021988131491567744253",
"100063538658715128708798593318606020576",
"40548758599749479190791093607363185227",
"111413152428028895034858142635084119158",
"103768153337180559631299760286115662130",
"176584393700949256963792424270840892446",
"96965394524666174032768644872226014293",
"223638632695206949900804210075283773869",
"45780420184685485565044647167794092235",
"49349137188221029820651636381569983233",
"319420662144570865804805569440593908988",
"211254357656768230942691696849840417213",
"316346235607789777842556260670141518301",
"60491984171504712358573402656666864381",
"164119520718585196489758132011853949976",
"156883564763652923911139060504885419217",
"86409542714179840978413066235832616391",
"214262918075978586647638800863564325043",
"15001173529868018833485631684964891751",
"301719556391848804070379409690134490352",
"324587869477214951329401874621744379099",
"120256618499798790757846048570189635043",
"207830950991560740419060386761159788633",
"197454404892881834488579920487415460872",
"56121993914710468034913664108482162761",
"209825694001219710151784401592885305776",
"10349133726724360656562572225075248214",
"89596549563494561771018047415368712657",
"274371666757532531898214146653817918812",
"90383693061177029020001155719617385595",
"168002022645030216925173234096761409859",
"120256618499798790757846048570189635043",
"207830950991560740419060386761159788633",
"309705300518220643310592178306478422307",
"23684273775972484886138074384736503178",
"316123102619581750034405251847427993433",
"55082325397223501176403937615557369911",
"246341054711435618352566172449454568345",
"284656917275139254409742404707819306386",
"118111724872238012127565888373249772824",
"8910661790318391837937137911995725104",
"329745287592631893096686803092768245363",
"284707344347448458053258677354075526510",
"126130478837488320229224462880911988650",
"99565028245735113531528209857438861810",
"208540125134282793755290608769127912666",
"153243100976715191755675636841179406329",
"99201040286162324442577806279332326903",
"239650855710934943411658919893401940037",
"109174718384118463445575697909682604378",
"311896862964302690411484515644664216131",
"23015157405566035364602252423909815485",
"264246452977720486596969352774817650700",
"199634893112334772740028500709661963538",
"286603283716028339842040865584998122650",
"23178910158268877546163426178891645303",
"215398573403733504636176548586559274737",
"124081747436876665967371543310093556782",
"118049759476020700961733913632609936204",
"311654867132070190603309187258525817572",
"234288697548758336373302213242595478270",
"56381139663140375196627448176364277743",
"6648552910833172592378973991937265289",
"208330856753781858003471227731497674065",
"290289466665999709809850510151489685909",
"192309891670712228514098843888326811725",
"111825585893557909753839575670115630029",
"235361471030198144066133440475179903144",
"159145401833170633489131873061854718995",
"251944081967483363045370193400461706545",
"128437302509500207881167471453599823684",
"51993912474362239491752475580816769277",
"3540269454055646868566928825044784343",
"11825093658337100409357484352075268373",
"229344783470975633597433871055152947852",
"222425611796167141504570559974135462808",
"26357158655018517206862049397600140934",
"59061238708102354211040062946660983191",
"315628191281694992014381970047413783330",
"77026472147631324656919749756245657672",
"157224051732482942337150358723560302259",
"185948575155826961620286183467761182997",
"33865188987455987759326577924696133695",
"132984444355140690904509583965613004046",
"264334950449219438589396171153727711295",
"315969100422305726308865005733637308048",
"44666091733248328036355822671140914469",
"308706508333355589760153278227813593228",
"309428718546715635454334405941610375278",
"260334283116974600884126477590282764409",
"69215672758086507962230466542084874490",
"167802274441021758533926567743362991929",
"299525353795094270378492325031447737815",
"248092708002032213527617538279762632230",
"40522638289901578952205882740469498179",
"92616643247114301890014241103469166237",
"146951955044302291472671800415257860128",
"203659778222165884296023838560585256487",
"284265616264764661184694073006963751619",
"67477626105595881121108916806039033341",
"58924393459968150399436100483512483677",
"250260825750778276804715595316072641876",
"258197069745863592335578838499471968395",
"213001715752494630069164852453011676327",
"141524140751494236432010963126055478530",
"30517122265411441421206455809415735116",
"137017202300729926293762618609529667072",
"231021704375184415248277766874400267550",
"81117909768419521127924780028205395397",
"17235978794505346274907209920000156989",
"165867785977192695883214330203389160806",
"166643104161288745696894861335641929354",
"36169350469437093332644804375753098324",
"52245712052178349267619601384018352394",
"90818487859624512597952257029244248381",
"297712950769859214491055557554163896145"
],
"threshold": 0.9
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/subproject/main/include/esp_tee_memory_utils.h"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-042e0b2f",
"signature_version": "v1",
"digest": {
"line_hashes": [
"330664118489061391736400372809865372836",
"173465907516237228001141276239039176179",
"11403253774134510325954060494888462577",
"246797853339348591608170989686115584162",
"157789404149273655162301452573559296586",
"303200302654806278897313721660710845054",
"106789108972673407858566081835160337616",
"54363335438470798193418802559073151246",
"238483817896013330648731570367782840129",
"30851576294422901886143346073403006342",
"19062842662198554069237968113056886822"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_ds_encrypt_params"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-0450aa2e",
"signature_version": "v1",
"digest": {
"function_hash": "93594254439997556944214461604052003598",
"length": 453.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/common/multi_heap.c",
"function": "multi_heap_assert"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-04bfe1ff",
"signature_version": "v1",
"digest": {
"function_hash": "246524466716360441320773295697201392648",
"length": 116.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_sha_block"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-04deffd0",
"signature_version": "v1",
"digest": {
"function_hash": "232552840595138608872062541276044332981",
"length": 107.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_wdt_hal_init"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-0ace7453",
"signature_version": "v1",
"digest": {
"function_hash": "229839935718288322898163463422272738480",
"length": 123.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_aes_crypt_ofb"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-0b90f859",
"signature_version": "v1",
"digest": {
"function_hash": "95351206766206192551875129322006160420",
"length": 452.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_aes_crypt_cbc"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-0c4f80ce",
"signature_version": "v1",
"digest": {
"function_hash": "117433597587519446598280648739031280761",
"length": 450.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/common/multi_heap.c",
"function": "multi_heap_assert"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-0fbaab83",
"signature_version": "v1",
"digest": {
"function_hash": "246524466716360441320773295697201392648",
"length": 116.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_aes_crypt_ctr"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-11d5859d",
"signature_version": "v1",
"digest": {
"function_hash": "65190414740433961034322449208763377646",
"length": 490.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_hmac_jtag_enable"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-14823603",
"signature_version": "v1",
"digest": {
"function_hash": "198550884093557428608222885047777027990",
"length": 409.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_sha_write_digest_state"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-14bbd0a1",
"signature_version": "v1",
"digest": {
"function_hash": "184037060194043114744803408213478638284",
"length": 79.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_esp_tee_sec_storage_ecdsa_sign"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-15d04854",
"signature_version": "v1",
"digest": {
"function_hash": "116308586657599872427077084610715215459",
"length": 417.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_erase_block"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-1b5d624f",
"signature_version": "v1",
"digest": {
"function_hash": "847157273715919315975975117732995954",
"length": 235.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_ds_finish_sign"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-1cc66a79",
"signature_version": "v1",
"digest": {
"function_hash": "47766972182221147886865638819676648064",
"length": 319.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_ds_encrypt_params_using_key_type"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-1f417202",
"signature_version": "v1",
"digest": {
"function_hash": "35949869139746048084804144535195281358",
"length": 639.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_device_config"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-2022075e",
"signature_version": "v1",
"digest": {
"function_hash": "305148560463794313365999651028358570527",
"length": 64.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_esp_tee_sec_storage_ecdsa_sign_pbkdf2"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-204b8a68",
"signature_version": "v1",
"digest": {
"function_hash": "308741724757485086015913247449767214223",
"length": 676.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_sha_write_digest_state"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-23f0dd40",
"signature_version": "v1",
"digest": {
"function_hash": "184037060194043114744803408213478638284",
"length": 79.0
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_service_table.c"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/764626a1b7c85b943d207da08a2f8f7d7f3def4d",
"id": "CVE-2026-45328-261cc64d",
"signature_version": "v1",
"digest": {
"line_hashes": [
"169079003700963788881292517166479641032",
"223738166604245136099086145270248183263",
"160448650674320302306656249389597484059",
"180234815418628393812679074575410414027"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_mmu_hal_map_region"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-26cef03a",
"signature_version": "v1",
"digest": {
"function_hash": "183634096378577029396003366696508965579",
"length": 405.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_mmu_hal_map_region"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-271cce1e",
"signature_version": "v1",
"digest": {
"function_hash": "183634096378577029396003366696508965579",
"length": 405.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_esp_tee_sec_storage_ecdsa_sign"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-28cdbbfe",
"signature_version": "v1",
"digest": {
"function_hash": "116308586657599872427077084610715215459",
"length": 417.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_memspi_host_flush_cache"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-29f28535",
"signature_version": "v1",
"digest": {
"function_hash": "228742677665624739622986632387128211594",
"length": 203.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_aes_crypt_ecb"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-29f74c75",
"signature_version": "v1",
"digest": {
"function_hash": "195357006254119007416041420604791084814",
"length": 394.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_esp_tee_sec_storage_ecdsa_sign_pbkdf2"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-2ab897a9",
"signature_version": "v1",
"digest": {
"function_hash": "308741724757485086015913247449767214223",
"length": 676.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_aes_crypt_cfb128"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-2b21310d",
"signature_version": "v1",
"digest": {
"function_hash": "267909448837731289281934636931134888842",
"length": 474.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/components/tee_ota_ops/esp_tee_ota_ops.c",
"function": "esp_tee_ota_write"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-2c26bc6f",
"signature_version": "v1",
"digest": {
"function_hash": "175069993103929722896936475206424603136",
"length": 818.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_aes_crypt_cfb8"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-2e04b4c8",
"signature_version": "v1",
"digest": {
"function_hash": "117433597587519446598280648739031280761",
"length": 450.0
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/subproject/main/include/esp_tee_memory_utils.h"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-2ea4d781",
"signature_version": "v1",
"digest": {
"line_hashes": [
"330664118489061391736400372809865372836",
"309517431928753915790509370431670839154",
"250010963386345735663612979148038932035",
"123020655553725300114442114184505501738",
"89899399859753332496853786493371856646",
"130913656557973156957725944236011343210",
"81621491899771501976431061491610256378"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_esp_tee_sec_storage_ecdsa_sign"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-2f08c5f6",
"signature_version": "v1",
"digest": {
"function_hash": "116308586657599872427077084610715215459",
"length": 417.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_psa_initial_attest_get_token"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-2f62c448",
"signature_version": "v1",
"digest": {
"function_hash": "301528459072009130556111333637016274234",
"length": 573.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_esp_tee_sec_storage_aead_decrypt"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-300bb13f",
"signature_version": "v1",
"digest": {
"function_hash": "84442747797294274556583165337632559779",
"length": 791.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_psa_initial_attest_get_token_size"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-311bb73d",
"signature_version": "v1",
"digest": {
"function_hash": "241409007330209431147378823599981387625",
"length": 182.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_erase_sector"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-3327b652",
"signature_version": "v1",
"digest": {
"function_hash": "64536371713713204430212105578224459757",
"length": 255.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_program_page"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-3384d775",
"signature_version": "v1",
"digest": {
"function_hash": "221986285490819012608861958697474149094",
"length": 427.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_mmu_hal_paddr_to_vaddr"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-37af4410",
"signature_version": "v1",
"digest": {
"function_hash": "84435900469094295083652786997219026431",
"length": 236.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_mmu_hal_paddr_to_vaddr"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-394d81b1",
"signature_version": "v1",
"digest": {
"function_hash": "84435900469094295083652786997219026431",
"length": 236.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_check_status"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-39e435a4",
"signature_version": "v1",
"digest": {
"function_hash": "305148560463794313365999651028358570527",
"length": 64.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_ds_start_sign"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-3b034e6e",
"signature_version": "v1",
"digest": {
"function_hash": "302293931358700619908268541645030386668",
"length": 533.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_chip_generic_config_host_io_mode"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-3db504dc",
"signature_version": "v1",
"digest": {
"function_hash": "148531830299181059324652930051072348740",
"length": 86.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_erase_sector"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-3e23cac0",
"signature_version": "v1",
"digest": {
"function_hash": "64536371713713204430212105578224459757",
"length": 255.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_tee_ota_write"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-3f6ceff8",
"signature_version": "v1",
"digest": {
"function_hash": "261525811991496363322672714585696835004",
"length": 272.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_supports_direct_read"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-41228815",
"signature_version": "v1",
"digest": {
"function_hash": "290273743467552009310262483972200228384",
"length": 94.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_sha_write_digest_state"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-428f7082",
"signature_version": "v1",
"digest": {
"function_hash": "184037060194043114744803408213478638284",
"length": 79.0
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/subproject/main/common/multi_heap.c"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-4366fa08",
"signature_version": "v1",
"digest": {
"line_hashes": [
"175858594811677782431503023722432476094",
"131630921575358928994058125685856460780",
"15908588244074761831049838149364145922",
"127178942594319200756991301987176968299",
"168615428499289416017660387409639575435"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_aes_crypt_ecb"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-444660ac",
"signature_version": "v1",
"digest": {
"function_hash": "195357006254119007416041420604791084814",
"length": 394.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_device_config"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-4730d990",
"signature_version": "v1",
"digest": {
"function_hash": "305148560463794313365999651028358570527",
"length": 64.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_common_command"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-4792eb81",
"signature_version": "v1",
"digest": {
"function_hash": "5858636670878277444883578759503465571",
"length": 333.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_bootloader_flash_execute_command_common"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-488e5922",
"signature_version": "v1",
"digest": {
"function_hash": "327090567935506191312782166294518084069",
"length": 396.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_sha_block"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-4902382e",
"signature_version": "v1",
"digest": {
"function_hash": "232552840595138608872062541276044332981",
"length": 107.0
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/subproject/components/tee_ota_ops/esp_tee_ota_ops.c"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-4ec23c4c",
"signature_version": "v1",
"digest": {
"line_hashes": [
"186637848761953063145763839389977597096",
"275938434839660328995706447160313482735",
"76553149807437493202996993610533947333",
"221723198154608087139200189238618946304"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_esp_tee_sec_storage_aead_decrypt"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-5293ef98",
"signature_version": "v1",
"digest": {
"function_hash": "84442747797294274556583165337632559779",
"length": 791.0
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/test_apps/tee_test_fw/main/test_esp_tee_sec_stg.c"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-56734284",
"signature_version": "v1",
"digest": {
"line_hashes": [
"315140927608339237213381478876632809070",
"281926397812571851163025824999033106278",
"326234253325873253894430295671987482992",
"270120180783258617724650808414358743736",
"157660549986654981909090679954512448861",
"297870928663164770064879605942934370210",
"56332303444068541500081529497362177607",
"40780087060968779716328109236627312050",
"32685572497715544142216721530110178025",
"63514592010264105328520901313442218585",
"94664861146055377073831247664294704880",
"155933941215619011603905307281830517405",
"2933606638493024713361786244874097769",
"232736137501768896739599994853151001679",
"328621857408547548510831893843788564312"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_mmu_hal_vaddr_to_paddr"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-56a90722",
"signature_version": "v1",
"digest": {
"function_hash": "26111237731698604278276945993972540361",
"length": 216.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_sha_dma"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-56dbe791",
"signature_version": "v1",
"digest": {
"function_hash": "146584827923362271112638520038684131534",
"length": 463.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_esp_tee_sec_storage_ecdsa_get_pubkey"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-56ff2c42",
"signature_version": "v1",
"digest": {
"function_hash": "179832527434112388112768876014717635026",
"length": 285.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_esp_tee_sec_storage_aead_decrypt"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-5b5d5ae0",
"signature_version": "v1",
"digest": {
"function_hash": "131315198810787049866539614533939023137",
"length": 770.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_setup_read_suspend"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-5ea32818",
"signature_version": "v1",
"digest": {
"function_hash": "290273743467552009310262483972200228384",
"length": 94.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_ecc_point_multiply"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-608d3b10",
"signature_version": "v1",
"digest": {
"function_hash": "306026328898128159234097001515352707409",
"length": 313.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_read"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-60a24b2d",
"signature_version": "v1",
"digest": {
"function_hash": "277160443927421792188967348988515719223",
"length": 446.0
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/test_apps/tee_test_fw/main/test_esp_tee_sec_stg.c"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-61e9da8d",
"signature_version": "v1",
"digest": {
"line_hashes": [
"190701060626530028567970110774347840784",
"93448411076754516026792259733207411585",
"273392499566070126470103530650241649371",
"119101672385863359109766033993138952214",
"24367233881238644416299822704769020750",
"161989381676030624923819301011795175349",
"227973398041536878741761127886539178696",
"227359987183578297854338871866109510536",
"88177652526010180521816586633848446357",
"281663771254375532396095572547865801878",
"234246800428039382510109185350600910739"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_sha_dma"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-639e4670",
"signature_version": "v1",
"digest": {
"function_hash": "146584827923362271112638520038684131534",
"length": 463.0
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-64e63f5f",
"signature_version": "v1",
"digest": {
"line_hashes": [
"268775783363746402426002106281150673420",
"40456189074984454776262952962867141853",
"283557230448094462604617807857056100596",
"67391344783879268398466862818874279140",
"40475364596708170310066163220064098402",
"844183067832131361579226701967074356",
"90837304570995490932517008006259439266",
"43124415952018555883131585319890569759",
"29468871790500236081422314219485223056",
"310783280756251265529216503633740957004",
"217213143308617297665608172714533393670",
"174675279832220323520748543572029087762",
"245126951998442292421485406355786667924",
"271960432864333283301904253809265209939",
"4472710446093545944854735036299879414",
"127241999504988438438458588731976407927",
"191186236172428241814206655999432669293",
"13013618659941319574356491094097354776",
"56890641369846557167353292699180310811",
"241172354030419077543241532760395834805",
"227325875729919749470618325390312000414",
"246768938004522920383064612506640423242",
"339245066703615483784245859638666773656",
"290654223411547049556978480971377707271",
"63578649393956540163421060044583557918",
"93840978487025027730868917417477142381",
"91719775402753070977603497095482100111",
"105172334100217341348273892019993915413",
"107594010224914266528064355305432264499",
"38004855975537759787359631024558115642",
"193104775803760098425918426666698193930",
"210673510601435069452010560156583482620",
"41506893136461743719568698723131111265",
"5975859672693939474182176766448466765",
"92824461747257507534371935348465256719",
"154111490079351941546922703582616740820",
"148688815889306428773874348865690929461",
"16182610963845012506258691366372338597",
"184980503536398220923983672433499185693",
"179293642403227754958927034895746644810",
"135423983164784444785428505674462501809",
"107594010224914266528064355305432264499",
"38004855975537759787359631024558115642",
"193104775803760098425918426666698193930",
"210673510601435069452010560156583482620",
"41506893136461743719568698723131111265",
"5975859672693939474182176766448466765",
"92824461747257507534371935348465256719",
"154111490079351941546922703582616740820",
"148688815889306428773874348865690929461",
"16182610963845012506258691366372338597",
"184980503536398220923983672433499185693",
"206839187527142638901807028546369622678",
"112529227477207716986437030233526403768",
"134796566749769269658637073060914098670",
"19687223828382109859457644656670271903",
"200310666584340912513230440118610187662",
"189724308093330918089538344630365350047",
"153140940095445910333020837277433563529",
"269663334013966182074039061304120636391",
"188918929777599613153905401771622263389",
"210879857421522672642573461061349891983",
"309542178477698488492911451573026919529",
"80023569787312012133030242297258283545",
"232011650053993482535965827437009424657",
"337079203139414328840508781904824186610",
"88246365372158899606902807210483203642",
"239906689352177578097804065608376756883",
"129573096929462382428607637338372037199",
"203421936451039119659039503372890525458",
"86610778969413797237369039616844817988",
"176490723555422012689343360974892658566",
"80302161015333584789354900678841686641",
"178916496483858975429443044080202109061",
"107120969233133531144157250200930433004",
"10508150390454847125116649149304661998",
"285054805325677437176026922962529941753",
"263893837258881441555624359429958504107",
"207491022690038531446576018635017217082",
"228700308144745832674125344482489435227",
"224635625566817710542932177047267327249",
"62508113415805934047552568884238693566",
"66618087002144974660902722770795599571",
"156244676276712855198895936071392257479",
"262729984301065537611295097329690034167",
"304424559060147560449331583671179130186",
"187376134014859542970409390758564957701",
"149119625988958600893363264576268994328",
"47151567190721239495226633921569958776",
"72953382138274242102012938037383282004",
"159499796457830250130698925726025504114",
"169407808264649440224783158300643272787",
"177637024898403522809013764744178523064",
"60557174308731322744184504915107774805",
"57004071906104613819247490294502335445",
"277972363028900620300210978432512377205",
"233534234539558768961764537686250640938",
"120964110697902661021988131491567744253",
"100063538658715128708798593318606020576",
"40548758599749479190791093607363185227",
"111413152428028895034858142635084119158",
"103768153337180559631299760286115662130",
"176584393700949256963792424270840892446",
"96965394524666174032768644872226014293",
"223638632695206949900804210075283773869",
"45780420184685485565044647167794092235",
"49349137188221029820651636381569983233",
"319420662144570865804805569440593908988",
"211254357656768230942691696849840417213",
"316346235607789777842556260670141518301",
"60491984171504712358573402656666864381",
"164119520718585196489758132011853949976",
"156883564763652923911139060504885419217",
"86409542714179840978413066235832616391",
"214262918075978586647638800863564325043",
"15001173529868018833485631684964891751",
"301719556391848804070379409690134490352",
"324587869477214951329401874621744379099",
"120256618499798790757846048570189635043",
"207830950991560740419060386761159788633",
"197454404892881834488579920487415460872",
"56121993914710468034913664108482162761",
"209825694001219710151784401592885305776",
"10349133726724360656562572225075248214",
"89596549563494561771018047415368712657",
"274371666757532531898214146653817918812",
"90383693061177029020001155719617385595",
"168002022645030216925173234096761409859",
"120256618499798790757846048570189635043",
"207830950991560740419060386761159788633",
"309705300518220643310592178306478422307",
"23684273775972484886138074384736503178",
"316123102619581750034405251847427993433",
"55082325397223501176403937615557369911",
"246341054711435618352566172449454568345",
"284656917275139254409742404707819306386",
"118111724872238012127565888373249772824",
"8910661790318391837937137911995725104",
"329745287592631893096686803092768245363",
"284707344347448458053258677354075526510",
"126130478837488320229224462880911988650",
"99565028245735113531528209857438861810",
"208540125134282793755290608769127912666",
"153243100976715191755675636841179406329",
"99201040286162324442577806279332326903",
"239650855710934943411658919893401940037",
"109174718384118463445575697909682604378",
"311896862964302690411484515644664216131",
"23015157405566035364602252423909815485",
"264246452977720486596969352774817650700",
"199634893112334772740028500709661963538",
"286603283716028339842040865584998122650",
"23178910158268877546163426178891645303",
"215398573403733504636176548586559274737",
"124081747436876665967371543310093556782",
"118049759476020700961733913632609936204",
"311654867132070190603309187258525817572",
"234288697548758336373302213242595478270",
"56381139663140375196627448176364277743",
"6648552910833172592378973991937265289",
"208330856753781858003471227731497674065",
"290289466665999709809850510151489685909",
"192309891670712228514098843888326811725",
"111825585893557909753839575670115630029",
"235361471030198144066133440475179903144",
"159145401833170633489131873061854718995",
"251944081967483363045370193400461706545",
"128437302509500207881167471453599823684",
"51993912474362239491752475580816769277",
"3540269454055646868566928825044784343",
"11825093658337100409357484352075268373",
"229344783470975633597433871055152947852",
"222425611796167141504570559974135462808",
"26357158655018517206862049397600140934",
"59061238708102354211040062946660983191",
"315628191281694992014381970047413783330",
"77026472147631324656919749756245657672",
"157224051732482942337150358723560302259",
"185948575155826961620286183467761182997",
"33865188987455987759326577924696133695",
"132984444355140690904509583965613004046",
"264334950449219438589396171153727711295",
"315969100422305726308865005733637308048",
"44666091733248328036355822671140914469",
"308706508333355589760153278227813593228",
"309428718546715635454334405941610375278",
"260334283116974600884126477590282764409",
"69215672758086507962230466542084874490",
"167802274441021758533926567743362991929",
"299525353795094270378492325031447737815",
"248092708002032213527617538279762632230",
"40522638289901578952205882740469498179",
"92616643247114301890014241103469166237",
"146951955044302291472671800415257860128",
"203659778222165884296023838560585256487",
"284265616264764661184694073006963751619",
"67477626105595881121108916806039033341",
"58924393459968150399436100483512483677",
"250260825750778276804715595316072641876",
"258197069745863592335578838499471968395",
"213001715752494630069164852453011676327",
"141524140751494236432010963126055478530",
"30517122265411441421206455809415735116",
"137017202300729926293762618609529667072",
"231021704375184415248277766874400267550",
"81117909768419521127924780028205395397",
"17235978794505346274907209920000156989",
"165867785977192695883214330203389160806",
"166643104161288745696894861335641929354",
"36169350469437093332644804375753098324",
"52245712052178349267619601384018352394",
"90818487859624512597952257029244248381",
"297712950769859214491055557554163896145"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_supports_direct_write"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-67c7a3cd",
"signature_version": "v1",
"digest": {
"function_hash": "290273743467552009310262483972200228384",
"length": 94.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_ds_encrypt_params"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-697060db",
"signature_version": "v1",
"digest": {
"function_hash": "280701531613231092228395990342381962603",
"length": 617.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_common_command"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-6b93d727",
"signature_version": "v1",
"digest": {
"function_hash": "5858636670878277444883578759503465571",
"length": 333.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_chip_generic_config_host_io_mode"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-6e9597cd",
"signature_version": "v1",
"digest": {
"function_hash": "148531830299181059324652930051072348740",
"length": 86.0
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/subproject/components/tee_ota_ops/esp_tee_ota_ops.c"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-7069ab9f",
"signature_version": "v1",
"digest": {
"line_hashes": [
"186637848761953063145763839389977597096",
"275938434839660328995706447160313482735",
"76553149807437493202996993610533947333",
"221723198154608087139200189238618946304"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_program_page"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-74c2091d",
"signature_version": "v1",
"digest": {
"function_hash": "221986285490819012608861958697474149094",
"length": 427.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_sha_block"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-75463b27",
"signature_version": "v1",
"digest": {
"function_hash": "232552840595138608872062541276044332981",
"length": 107.0
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-758df542",
"signature_version": "v1",
"digest": {
"line_hashes": [
"227657605161246802334359074133188249311",
"309347575207434126786854231581854089777",
"162013745865881399461282369914826136297",
"155911692936289697244062125260198339961",
"259402792237631932817976871648821881307",
"227657605161246802334359074133188249311",
"309347575207434126786854231581854089777",
"162013745865881399461282369914826136297",
"155911692936289697244062125260198339961",
"259402792237631932817976871648821881307",
"227657605161246802334359074133188249311",
"309347575207434126786854231581854089777",
"162013745865881399461282369914826136297",
"155911692936289697244062125260198339961",
"259402792237631932817976871648821881307",
"227657605161246802334359074133188249311",
"309347575207434126786854231581854089777",
"162013745865881399461282369914826136297",
"155911692936289697244062125260198339961",
"259402792237631932817976871648821881307",
"93285727189992489464427883400903677131",
"32798568290502969602557680885603266423",
"40245338381117295131934480131775603472",
"70499051964044188882457645832283758828",
"126317629108340972586234451308556234679",
"227657605161246802334359074133188249311",
"309347575207434126786854231581854089777",
"162013745865881399461282369914826136297",
"155911692936289697244062125260198339961",
"259402792237631932817976871648821881307",
"272860493138436952565028575143593271780",
"260707404386057392112705722746212771902",
"75400817353303278993061916071420402586",
"237077802897524759884063616725821473211",
"68083432606367573660277956724381157107",
"272667501733416391757838733000504222114",
"106084408473336494793402988035362344206",
"189715441446877677242437137648067096265",
"112763037947700643545971038545538762345",
"72541109799895909549157051211552189116",
"278975732450196822392837406825035124835",
"86972117840086068760296220000834869140",
"122877437752474558289010868587265135698",
"178118431424121272950616748383493096334",
"317417996895109283627699486845869416037",
"158837059348151063340840241852481425273",
"77900603047241292040443569843762428076",
"18774962818057917158357072925861743473",
"139152984816137507393950751130951896697",
"231687840069463963184428407520958095294",
"137762464015826228281214753371198162652",
"65464315969268471980736552926675321042",
"61991648796497890255060592665198937051",
"320099998660135783200824844666075614097",
"329544241963909069325749795414877780017",
"201623761411241321183354520613078126853",
"75748408919712093818035408198074402747",
"313186347448549376671324809016536298044",
"30103629211944726439899245616852891494",
"302033031132809053555119689759005687848",
"93378497168229351399520447943946072884",
"258771121839594552126686788217007503312",
"95246992825394481999394294871785585519",
"105699065944549422838070729022950628273",
"76932010778241929812907432165064977680",
"191564316331040455270765427135397160519",
"11927914821191578228687534023816899295",
"158626611659967286839907621395295354180",
"273614688180942100944830366087784538847",
"256148326040256977477698165151066334712",
"49672903990833466562092980398926155391",
"48985626793218379705310281216938295126",
"248855252504150377774216548641241089400",
"44481470730721859681224986059147508526",
"142353755902171917054437009654222559011",
"15695026823218062652520045748423377840",
"277872258029657916494027508676821624595",
"183493042084957460217425240756961424786",
"2394687961089309085316661024548380895",
"304817424783457260950188399721615785355",
"38319177000567458541326239903498022143",
"143063865716628474810388544567660929501",
"233724195214861261257761129892064066323",
"83194993599505026717159026857671371945",
"327666947658036478573787144117755226633",
"112098506839293868189232543448307952350",
"337784235489609341193695514120959495103",
"326706986059025237167884815510753873763",
"287480835276576937753924538733023824829",
"198225637936451119492956108849330197647",
"330307488376020683264767172625353125722",
"5487886151474879217373255707482031246",
"57612399414356485249734573759974453661",
"310033321741589023689458338471126463124",
"334139434884814305937372626941678421105",
"176048929885222971614369501227456094776",
"154677349147258723405300161582037879325",
"235172409261793405065310809575676218064",
"296749360704139334359472707011752117837",
"306902656012568877904245946842344705588",
"212507455487243157794713677292932423217",
"324479859380577410738535752408519142043",
"277945609850028680315160053512254788743",
"19116323957500278804801439868249972603",
"45600226903108142807259980404697609932",
"300777666365035899838825196852197340659",
"186169630803937253773330644554038466421",
"23426040596979307498990126875836449718",
"34588315208747866782642073872464535468",
"75006010700817072077720101025805860558",
"134583324289169678169088233987598570759",
"69511505606834297260324281457269874116"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/common/multi_heap.c",
"function": "multi_heap_assert"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-7787efb3",
"signature_version": "v1",
"digest": {
"function_hash": "246524466716360441320773295697201392648",
"length": 116.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_erase_sector"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-7e1054b8",
"signature_version": "v1",
"digest": {
"function_hash": "64536371713713204430212105578224459757",
"length": 255.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_ecc_point_multiply"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-7f09ced7",
"signature_version": "v1",
"digest": {
"function_hash": "306026328898128159234097001515352707409",
"length": 313.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_sha"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-8416efa5",
"signature_version": "v1",
"digest": {
"function_hash": "141612044916264207801854615773971973164",
"length": 331.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_wdt_hal_init"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-842cb879",
"signature_version": "v1",
"digest": {
"function_hash": "229839935718288322898163463422272738480",
"length": 123.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_memspi_host_flush_cache"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-86aacea1",
"signature_version": "v1",
"digest": {
"function_hash": "228742677665624739622986632387128211594",
"length": 203.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_ds_sign"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-8a742ab6",
"signature_version": "v1",
"digest": {
"function_hash": "243809610467646845018511880169869022533",
"length": 531.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_hmac_calculate"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-8df776fd",
"signature_version": "v1",
"digest": {
"function_hash": "253221290435779754925298427055025792303",
"length": 551.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_sha_read_digest_state"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-910102da",
"signature_version": "v1",
"digest": {
"function_hash": "184037060194043114744803408213478638284",
"length": 79.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_check_status"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-91317c67",
"signature_version": "v1",
"digest": {
"function_hash": "305148560463794313365999651028358570527",
"length": 64.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_program_page"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-9193e2a5",
"signature_version": "v1",
"digest": {
"function_hash": "221986285490819012608861958697474149094",
"length": 427.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/components/tee_ota_ops/esp_tee_ota_ops.c",
"function": "esp_tee_ota_write"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-934ae193",
"signature_version": "v1",
"digest": {
"function_hash": "175069993103929722896936475206424603136",
"length": 818.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_hmac_jtag_enable"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-93da9ddf",
"signature_version": "v1",
"digest": {
"function_hash": "198550884093557428608222885047777027990",
"length": 409.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_esp_tee_sec_storage_aead_encrypt"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-946c56f4",
"signature_version": "v1",
"digest": {
"function_hash": "160424937026025048216756743004864194465",
"length": 779.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_aes_crypt_ofb"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-94b970bc",
"signature_version": "v1",
"digest": {
"function_hash": "95351206766206192551875129322006160420",
"length": 452.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_common_command"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-962ac6a1",
"signature_version": "v1",
"digest": {
"function_hash": "5858636670878277444883578759503465571",
"length": 333.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_sha_dma"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-9662a4b1",
"signature_version": "v1",
"digest": {
"function_hash": "146584827923362271112638520038684131534",
"length": 463.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_psa_initial_attest_get_token_size"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-96a03fa1",
"signature_version": "v1",
"digest": {
"function_hash": "241409007330209431147378823599981387625",
"length": 182.0
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/subproject/main/common/multi_heap.c"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-97da78fd",
"signature_version": "v1",
"digest": {
"line_hashes": [
"175858594811677782431503023722432476094",
"131630921575358928994058125685856460780",
"15908588244074761831049838149364145922",
"127178942594319200756991301987176968299",
"168615428499289416017660387409639575435"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_aes_crypt_cfb8"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-98a4c879",
"signature_version": "v1",
"digest": {
"function_hash": "117433597587519446598280648739031280761",
"length": 450.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_psa_initial_attest_get_token"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-9943b06d",
"signature_version": "v1",
"digest": {
"function_hash": "301528459072009130556111333637016274234",
"length": 573.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_supports_direct_write"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-9a6352d9",
"signature_version": "v1",
"digest": {
"function_hash": "290273743467552009310262483972200228384",
"length": 94.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_ds_sign"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-9a7c9bd6",
"signature_version": "v1",
"digest": {
"function_hash": "243809610467646845018511880169869022533",
"length": 531.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_hmac_calculate"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-9d7ffc5e",
"signature_version": "v1",
"digest": {
"function_hash": "253221290435779754925298427055025792303",
"length": 551.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_tee_ota_write"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-9dd0d938",
"signature_version": "v1",
"digest": {
"function_hash": "261525811991496363322672714585696835004",
"length": 272.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_ds_encrypt_params_using_key_type"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-9ec699e4",
"signature_version": "v1",
"digest": {
"function_hash": "35949869139746048084804144535195281358",
"length": 639.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_ds_encrypt_params"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-9ff5bba2",
"signature_version": "v1",
"digest": {
"function_hash": "280701531613231092228395990342381962603",
"length": 617.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_wdt_hal_init"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-a08ccc51",
"signature_version": "v1",
"digest": {
"function_hash": "229839935718288322898163463422272738480",
"length": 123.0
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_service_table.c"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/440a5d1906502023f2a0fb0aecbdf0602d14acbf",
"id": "CVE-2026-45328-a247b515",
"signature_version": "v1",
"digest": {
"line_hashes": [
"169079003700963788881292517166479641032",
"223738166604245136099086145270248183263",
"160448650674320302306656249389597484059",
"180234815418628393812679074575410414027"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_mmu_hal_paddr_to_vaddr"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-a3b9168f",
"signature_version": "v1",
"digest": {
"function_hash": "84435900469094295083652786997219026431",
"length": 236.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_aes_crypt_ctr"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-a461ed8c",
"signature_version": "v1",
"digest": {
"function_hash": "65190414740433961034322449208763377646",
"length": 490.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_sha_read_digest_state"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-a47a8220",
"signature_version": "v1",
"digest": {
"function_hash": "184037060194043114744803408213478638284",
"length": 79.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_aes_crypt_cfb128"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-a5305aba",
"signature_version": "v1",
"digest": {
"function_hash": "267909448837731289281934636931134888842",
"length": 474.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_hmac_calculate"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-a79533a6",
"signature_version": "v1",
"digest": {
"function_hash": "253221290435779754925298427055025792303",
"length": 551.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_mmu_hal_vaddr_to_paddr"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-a802b6e3",
"signature_version": "v1",
"digest": {
"function_hash": "26111237731698604278276945993972540361",
"length": 216.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_sha"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-a837a402",
"signature_version": "v1",
"digest": {
"function_hash": "141612044916264207801854615773971973164",
"length": 331.0
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/subproject/components/tee_ota_ops/esp_tee_ota_ops.c"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-af04c7bc",
"signature_version": "v1",
"digest": {
"line_hashes": [
"186637848761953063145763839389977597096",
"275938434839660328995706447160313482735",
"76553149807437493202996993610533947333",
"221723198154608087139200189238618946304"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_erase_block"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-b0de98cb",
"signature_version": "v1",
"digest": {
"function_hash": "847157273715919315975975117732995954",
"length": 235.0
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/subproject/main/include/esp_tee_memory_utils.h"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-b706bf6b",
"signature_version": "v1",
"digest": {
"line_hashes": [
"330664118489061391736400372809865372836",
"173465907516237228001141276239039176179",
"11403253774134510325954060494888462577",
"246797853339348591608170989686115584162",
"157789404149273655162301452573559296586",
"303200302654806278897313721660710845054",
"106789108972673407858566081835160337616",
"54363335438470798193418802559073151246",
"238483817896013330648731570367782840129",
"30851576294422901886143346073403006342",
"19062842662198554069237968113056886822"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_read"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-b9b15208",
"signature_version": "v1",
"digest": {
"function_hash": "277160443927421792188967348988515719223",
"length": 446.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_read"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-ba0cebbd",
"signature_version": "v1",
"digest": {
"function_hash": "277160443927421792188967348988515719223",
"length": 446.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_set_write_protect"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-bb02610b",
"signature_version": "v1",
"digest": {
"function_hash": "148531830299181059324652930051072348740",
"length": 86.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_ds_start_sign"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-bb1f8529",
"signature_version": "v1",
"digest": {
"function_hash": "302293931358700619908268541645030386668",
"length": 533.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_set_write_protect"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-be7d1fed",
"signature_version": "v1",
"digest": {
"function_hash": "148531830299181059324652930051072348740",
"length": 86.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_esp_tee_sec_storage_aead_encrypt"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-bf1311a7",
"signature_version": "v1",
"digest": {
"function_hash": "160424937026025048216756743004864194465",
"length": 779.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_aes_crypt_ofb"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-c0c41120",
"signature_version": "v1",
"digest": {
"function_hash": "95351206766206192551875129322006160420",
"length": 452.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_ecc_point_multiply"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-c0d8d927",
"signature_version": "v1",
"digest": {
"function_hash": "306026328898128159234097001515352707409",
"length": 313.0
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/test_apps/tee_test_fw/main/test_esp_tee_sec_stg.c"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-c37abb41",
"signature_version": "v1",
"digest": {
"line_hashes": [
"315140927608339237213381478876632809070",
"281926397812571851163025824999033106278",
"326234253325873253894430295671987482992",
"270120180783258617724650808414358743736",
"157660549986654981909090679954512448861",
"297870928663164770064879605942934370210",
"56332303444068541500081529497362177607",
"40780087060968779716328109236627312050",
"32685572497715544142216721530110178025",
"63514592010264105328520901313442218585",
"94664861146055377073831247664294704880",
"155933941215619011603905307281830517405",
"2933606638493024713361786244874097769",
"232736137501768896739599994853151001679",
"328621857408547548510831893843788564312"
],
"threshold": 0.9
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-c40912bb",
"signature_version": "v1",
"digest": {
"line_hashes": [
"41377518701661586260173707772440887291",
"315715852581871858195573833729102272496",
"163450079851195794973664534804067577753",
"118693892719630814823270473195131043573",
"227657605161246802334359074133188249311",
"309347575207434126786854231581854089777",
"162013745865881399461282369914826136297",
"155911692936289697244062125260198339961",
"259402792237631932817976871648821881307",
"227657605161246802334359074133188249311",
"309347575207434126786854231581854089777",
"162013745865881399461282369914826136297",
"155911692936289697244062125260198339961",
"259402792237631932817976871648821881307",
"227657605161246802334359074133188249311",
"309347575207434126786854231581854089777",
"162013745865881399461282369914826136297",
"155911692936289697244062125260198339961",
"259402792237631932817976871648821881307",
"227657605161246802334359074133188249311",
"309347575207434126786854231581854089777",
"162013745865881399461282369914826136297",
"155911692936289697244062125260198339961",
"259402792237631932817976871648821881307",
"93285727189992489464427883400903677131",
"32798568290502969602557680885603266423",
"40245338381117295131934480131775603472",
"70499051964044188882457645832283758828",
"126317629108340972586234451308556234679",
"227657605161246802334359074133188249311",
"309347575207434126786854231581854089777",
"162013745865881399461282369914826136297",
"155911692936289697244062125260198339961",
"259402792237631932817976871648821881307",
"37778161543885274734671519937120795795",
"249971004709279868042009998008644599787",
"110182310158059797837809102972243975597",
"149225252540418144105916073508421406124",
"237077802897524759884063616725821473211",
"68083432606367573660277956724381157107",
"272667501733416391757838733000504222114",
"106084408473336494793402988035362344206",
"189715441446877677242437137648067096265",
"112763037947700643545971038545538762345",
"72541109799895909549157051211552189116",
"278975732450196822392837406825035124835",
"86972117840086068760296220000834869140",
"122877437752474558289010868587265135698",
"178118431424121272950616748383493096334",
"317417996895109283627699486845869416037",
"158837059348151063340840241852481425273",
"77900603047241292040443569843762428076",
"18774962818057917158357072925861743473",
"139152984816137507393950751130951896697",
"231687840069463963184428407520958095294",
"137762464015826228281214753371198162652",
"65464315969268471980736552926675321042",
"61991648796497890255060592665198937051",
"320099998660135783200824844666075614097",
"329544241963909069325749795414877780017",
"201623761411241321183354520613078126853",
"75748408919712093818035408198074402747",
"102657822574713210112329624539574049889",
"30103629211944726439899245616852891494",
"302033031132809053555119689759005687848",
"93378497168229351399520447943946072884",
"258771121839594552126686788217007503312",
"95246992825394481999394294871785585519",
"105699065944549422838070729022950628273",
"76932010778241929812907432165064977680",
"191564316331040455270765427135397160519",
"195173753815480676462970293781542666437",
"205908435787044043416857598367695390756",
"21647695828531333431073320071642163050",
"133309826631540499775595604751610860763",
"256148326040256977477698165151066334712",
"49672903990833466562092980398926155391",
"48985626793218379705310281216938295126",
"248855252504150377774216548641241089400",
"44481470730721859681224986059147508526",
"142353755902171917054437009654222559011",
"15695026823218062652520045748423377840",
"277872258029657916494027508676821624595",
"183493042084957460217425240756961424786",
"2394687961089309085316661024548380895",
"304817424783457260950188399721615785355",
"38319177000567458541326239903498022143",
"143063865716628474810388544567660929501",
"233724195214861261257761129892064066323",
"83194993599505026717159026857671371945",
"327666947658036478573787144117755226633",
"112098506839293868189232543448307952350",
"337784235489609341193695514120959495103",
"326706986059025237167884815510753873763",
"287480835276576937753924538733023824829",
"198225637936451119492956108849330197647",
"330307488376020683264767172625353125722",
"5487886151474879217373255707482031246",
"216733481785972319249751847388698491132",
"160853819200322170291570775402017706",
"121496057312801172208110134654319219032",
"301810604399832075383333622130394035252",
"128793424810777908950139486453465700042",
"21659902727855655749602110159419973430",
"191804479227981373375210598624134328030",
"5487886151474879217373255707482031246",
"216733481785972319249751847388698491132",
"160853819200322170291570775402017706",
"121496057312801172208110134654319219032",
"301810604399832075383333622130394035252",
"128793424810777908950139486453465700042",
"149551397188652088192785547252828787762",
"154677349147258723405300161582037879325",
"235172409261793405065310809575676218064",
"296749360704139334359472707011752117837",
"306902656012568877904245946842344705588",
"212507455487243157794713677292932423217",
"324479859380577410738535752408519142043",
"277945609850028680315160053512254788743",
"26668540342342737774548095177562704326",
"45600226903108142807259980404697609932",
"300777666365035899838825196852197340659",
"186169630803937253773330644554038466421",
"23426040596979307498990126875836449718",
"34588315208747866782642073872464535468",
"75006010700817072077720101025805860558",
"134583324289169678169088233987598570759",
"69511505606834297260324281457269874116",
"127179307582888630599752032311620685882",
"333602313961053271656386604648857847085",
"67422983866444379855814811235557032343",
"125588542549300484461197398926963223656",
"174392527954108582079996612394789807789",
"211895668777446568014231625112008752309",
"210070515352900074073195285011548260448",
"235511088623951413583752306298285967372",
"268451969427165536899843929121454468097",
"79873928132938429023009793467430850418",
"191377222089544245075164279779912577168",
"302653922870949698964080113871592781401",
"92896351948499449298651074689421459807"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_bootloader_flash_execute_command_common"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-c4b384d2",
"signature_version": "v1",
"digest": {
"function_hash": "327090567935506191312782166294518084069",
"length": 396.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_set_write_protect"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-c5481dc6",
"signature_version": "v1",
"digest": {
"function_hash": "148531830299181059324652930051072348740",
"length": 86.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_supports_direct_write"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-c5c3a5f9",
"signature_version": "v1",
"digest": {
"function_hash": "290273743467552009310262483972200228384",
"length": 94.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_ds_sign"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-c5d888c7",
"signature_version": "v1",
"digest": {
"function_hash": "243809610467646845018511880169869022533",
"length": 531.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_aes_crypt_cbc"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-c62dd045",
"signature_version": "v1",
"digest": {
"function_hash": "117433597587519446598280648739031280761",
"length": 450.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_ds_start_sign"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-cb53e8d2",
"signature_version": "v1",
"digest": {
"function_hash": "302293931358700619908268541645030386668",
"length": 533.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/include/esp_tee_memory_utils.h",
"function": "esp_tee_ptr_in_ree"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-cc5ca47d",
"signature_version": "v1",
"digest": {
"function_hash": "294149026051254522061079534716755691497",
"length": 341.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_supports_direct_read"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-d02b075d",
"signature_version": "v1",
"digest": {
"function_hash": "290273743467552009310262483972200228384",
"length": 94.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_chip_generic_config_host_io_mode"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-d31f535c",
"signature_version": "v1",
"digest": {
"function_hash": "148531830299181059324652930051072348740",
"length": 86.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_aes_crypt_ctr"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-d3eaab4e",
"signature_version": "v1",
"digest": {
"function_hash": "65190414740433961034322449208763377646",
"length": 490.0
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_service_table.c"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/afd14ab113acd0ca369965404c99ac42e74d4fcd",
"id": "CVE-2026-45328-d640a14a",
"signature_version": "v1",
"digest": {
"line_hashes": [
"169079003700963788881292517166479641032",
"223738166604245136099086145270248183263",
"160448650674320302306656249389597484059",
"180234815418628393812679074575410414027"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_sha"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-d6855698",
"signature_version": "v1",
"digest": {
"function_hash": "141612044916264207801854615773971973164",
"length": 331.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_ds_finish_sign"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-d93165ef",
"signature_version": "v1",
"digest": {
"function_hash": "47766972182221147886865638819676648064",
"length": 319.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_esp_tee_sec_storage_ecdsa_get_pubkey"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-da5af944",
"signature_version": "v1",
"digest": {
"function_hash": "179832527434112388112768876014717635026",
"length": 285.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_aes_crypt_cfb128"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-dfbf50c5",
"signature_version": "v1",
"digest": {
"function_hash": "267909448837731289281934636931134888842",
"length": 474.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_mmu_hal_map_region"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-e00e7d63",
"signature_version": "v1",
"digest": {
"function_hash": "183634096378577029396003366696508965579",
"length": 405.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_supports_direct_read"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-e0826fb0",
"signature_version": "v1",
"digest": {
"function_hash": "290273743467552009310262483972200228384",
"length": 94.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_hmac_jtag_enable"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-e0f92eab",
"signature_version": "v1",
"digest": {
"function_hash": "198550884093557428608222885047777027990",
"length": 409.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_bootloader_flash_execute_command_common"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-e1fd1ad4",
"signature_version": "v1",
"digest": {
"function_hash": "327090567935506191312782166294518084069",
"length": 396.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_sha_read_digest_state"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-e2f67cef",
"signature_version": "v1",
"digest": {
"function_hash": "184037060194043114744803408213478638284",
"length": 79.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_esp_tee_sec_storage_ecdsa_get_pubkey"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-e34a81fb",
"signature_version": "v1",
"digest": {
"function_hash": "179832527434112388112768876014717635026",
"length": 285.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_aes_crypt_ecb"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-e73c59a4",
"signature_version": "v1",
"digest": {
"function_hash": "195357006254119007416041420604791084814",
"length": 394.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_memspi_host_flush_cache"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-ea1b7647",
"signature_version": "v1",
"digest": {
"function_hash": "228742677665624739622986632387128211594",
"length": 203.0
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-ed12ce17",
"signature_version": "v1",
"digest": {
"line_hashes": [
"40475364596708170310066163220064098402",
"844183067832131361579226701967074356",
"90837304570995490932517008006259439266",
"43124415952018555883131585319890569759",
"29468871790500236081422314219485223056",
"310783280756251265529216503633740957004",
"217213143308617297665608172714533393670",
"174675279832220323520748543572029087762",
"245126951998442292421485406355786667924",
"271960432864333283301904253809265209939",
"4472710446093545944854735036299879414",
"127241999504988438438458588731976407927",
"191186236172428241814206655999432669293",
"13013618659941319574356491094097354776",
"56890641369846557167353292699180310811",
"241172354030419077543241532760395834805",
"227325875729919749470618325390312000414",
"246768938004522920383064612506640423242",
"339245066703615483784245859638666773656",
"290654223411547049556978480971377707271",
"63578649393956540163421060044583557918",
"93840978487025027730868917417477142381",
"216343873034120578781415796259337864724",
"11203298587206850833585563264539028425",
"247217814991383788784906876616116832568",
"117993732448875710859761950364916846824",
"252162585249333465648427138540538053563",
"149012148209967215887859445456676358396",
"234038625006222300393502291659703604112",
"324404118304754660495459207056533985707",
"26302405162494046451906359465073259185",
"154111490079351941546922703582616740820",
"148688815889306428773874348865690929461",
"16182610963845012506258691366372338597",
"184980503536398220923983672433499185693",
"21416017389986994456849622029706778455",
"268884147375969448741666198561513124549",
"247217814991383788784906876616116832568",
"117993732448875710859761950364916846824",
"252162585249333465648427138540538053563",
"149012148209967215887859445456676358396",
"234038625006222300393502291659703604112",
"324404118304754660495459207056533985707",
"26302405162494046451906359465073259185",
"154111490079351941546922703582616740820",
"148688815889306428773874348865690929461",
"16182610963845012506258691366372338597",
"184980503536398220923983672433499185693",
"206839187527142638901807028546369622678",
"112529227477207716986437030233526403768",
"134796566749769269658637073060914098670",
"19687223828382109859457644656670271903",
"200310666584340912513230440118610187662",
"189724308093330918089538344630365350047",
"153140940095445910333020837277433563529",
"269663334013966182074039061304120636391",
"188918929777599613153905401771622263389",
"210879857421522672642573461061349891983",
"309542178477698488492911451573026919529",
"80023569787312012133030242297258283545",
"232011650053993482535965827437009424657",
"337079203139414328840508781904824186610",
"88246365372158899606902807210483203642",
"239906689352177578097804065608376756883",
"129573096929462382428607637338372037199",
"203421936451039119659039503372890525458",
"86610778969413797237369039616844817988",
"176490723555422012689343360974892658566",
"80302161015333584789354900678841686641",
"178916496483858975429443044080202109061",
"107120969233133531144157250200930433004",
"10508150390454847125116649149304661998",
"285054805325677437176026922962529941753",
"263893837258881441555624359429958504107",
"207491022690038531446576018635017217082",
"228700308144745832674125344482489435227",
"224635625566817710542932177047267327249",
"62508113415805934047552568884238693566",
"66618087002144974660902722770795599571",
"156244676276712855198895936071392257479",
"262729984301065537611295097329690034167",
"304424559060147560449331583671179130186",
"187376134014859542970409390758564957701",
"149119625988958600893363264576268994328",
"47151567190721239495226633921569958776",
"72953382138274242102012938037383282004",
"159499796457830250130698925726025504114",
"169407808264649440224783158300643272787",
"177637024898403522809013764744178523064",
"60557174308731322744184504915107774805",
"57004071906104613819247490294502335445",
"277972363028900620300210978432512377205",
"233534234539558768961764537686250640938",
"120964110697902661021988131491567744253",
"100063538658715128708798593318606020576",
"40548758599749479190791093607363185227",
"111413152428028895034858142635084119158",
"103768153337180559631299760286115662130",
"176584393700949256963792424270840892446",
"96965394524666174032768644872226014293",
"223638632695206949900804210075283773869",
"45780420184685485565044647167794092235",
"49349137188221029820651636381569983233",
"319420662144570865804805569440593908988",
"211254357656768230942691696849840417213",
"316346235607789777842556260670141518301",
"60491984171504712358573402656666864381",
"164119520718585196489758132011853949976",
"156883564763652923911139060504885419217",
"86409542714179840978413066235832616391",
"214262918075978586647638800863564325043",
"15001173529868018833485631684964891751",
"301719556391848804070379409690134490352",
"324587869477214951329401874621744379099",
"120256618499798790757846048570189635043",
"207830950991560740419060386761159788633",
"197454404892881834488579920487415460872",
"56121993914710468034913664108482162761",
"209825694001219710151784401592885305776",
"10349133726724360656562572225075248214",
"89596549563494561771018047415368712657",
"274371666757532531898214146653817918812",
"90383693061177029020001155719617385595",
"168002022645030216925173234096761409859",
"120256618499798790757846048570189635043",
"207830950991560740419060386761159788633",
"309705300518220643310592178306478422307",
"23684273775972484886138074384736503178",
"316123102619581750034405251847427993433",
"55082325397223501176403937615557369911",
"246341054711435618352566172449454568345",
"284656917275139254409742404707819306386",
"118111724872238012127565888373249772824",
"8910661790318391837937137911995725104",
"329745287592631893096686803092768245363",
"284707344347448458053258677354075526510",
"126130478837488320229224462880911988650",
"99565028245735113531528209857438861810",
"208540125134282793755290608769127912666",
"153243100976715191755675636841179406329",
"99201040286162324442577806279332326903",
"239650855710934943411658919893401940037",
"109174718384118463445575697909682604378",
"311896862964302690411484515644664216131",
"23015157405566035364602252423909815485",
"264246452977720486596969352774817650700",
"199634893112334772740028500709661963538",
"286603283716028339842040865584998122650",
"23178910158268877546163426178891645303",
"215398573403733504636176548586559274737",
"124081747436876665967371543310093556782",
"118049759476020700961733913632609936204",
"311654867132070190603309187258525817572",
"234288697548758336373302213242595478270",
"56381139663140375196627448176364277743",
"6648552910833172592378973991937265289",
"208330856753781858003471227731497674065",
"290289466665999709809850510151489685909",
"192309891670712228514098843888326811725",
"111825585893557909753839575670115630029",
"235361471030198144066133440475179903144",
"159145401833170633489131873061854718995",
"251944081967483363045370193400461706545",
"128437302509500207881167471453599823684",
"51993912474362239491752475580816769277",
"3540269454055646868566928825044784343",
"11825093658337100409357484352075268373",
"229344783470975633597433871055152947852",
"222425611796167141504570559974135462808",
"26357158655018517206862049397600140934",
"59061238708102354211040062946660983191",
"315628191281694992014381970047413783330",
"77026472147631324656919749756245657672",
"157224051732482942337150358723560302259",
"185948575155826961620286183467761182997",
"33865188987455987759326577924696133695",
"132984444355140690904509583965613004046",
"264334950449219438589396171153727711295",
"315969100422305726308865005733637308048",
"44666091733248328036355822671140914469",
"308706508333355589760153278227813593228",
"309428718546715635454334405941610375278",
"260334283116974600884126477590282764409",
"69215672758086507962230466542084874490",
"167802274441021758533926567743362991929",
"299525353795094270378492325031447737815",
"248092708002032213527617538279762632230",
"40522638289901578952205882740469498179",
"92616643247114301890014241103469166237",
"146951955044302291472671800415257860128",
"203659778222165884296023838560585256487",
"284265616264764661184694073006963751619",
"67477626105595881121108916806039033341",
"58924393459968150399436100483512483677",
"250260825750778276804715595316072641876",
"258197069745863592335578838499471968395",
"213001715752494630069164852453011676327",
"141524140751494236432010963126055478530",
"30517122265411441421206455809415735116",
"137017202300729926293762618609529667072",
"231021704375184415248277766874400267550",
"81117909768419521127924780028205395397",
"17235978794505346274907209920000156989",
"165867785977192695883214330203389160806",
"166643104161288745696894861335641929354",
"36169350469437093332644804375753098324",
"52245712052178349267619601384018352394",
"90818487859624512597952257029244248381",
"297712950769859214491055557554163896145"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_esp_tee_sec_storage_aead_encrypt"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-edd5498b",
"signature_version": "v1",
"digest": {
"function_hash": "164793760159929617014539231835930893926",
"length": 758.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_ds_finish_sign"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-edd5cbab",
"signature_version": "v1",
"digest": {
"function_hash": "47766972182221147886865638819676648064",
"length": 319.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_esp_tee_sec_storage_ecdsa_sign_pbkdf2"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-ee648a45",
"signature_version": "v1",
"digest": {
"function_hash": "308741724757485086015913247449767214223",
"length": 676.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_erase_block"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-ef5d7d71",
"signature_version": "v1",
"digest": {
"function_hash": "847157273715919315975975117732995954",
"length": 235.0
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-f0587463",
"signature_version": "v1",
"digest": {
"line_hashes": [
"41377518701661586260173707772440887291",
"315715852581871858195573833729102272496",
"163450079851195794973664534804067577753",
"118693892719630814823270473195131043573",
"227657605161246802334359074133188249311",
"309347575207434126786854231581854089777",
"162013745865881399461282369914826136297",
"155911692936289697244062125260198339961",
"259402792237631932817976871648821881307",
"227657605161246802334359074133188249311",
"309347575207434126786854231581854089777",
"162013745865881399461282369914826136297",
"155911692936289697244062125260198339961",
"259402792237631932817976871648821881307",
"227657605161246802334359074133188249311",
"309347575207434126786854231581854089777",
"162013745865881399461282369914826136297",
"155911692936289697244062125260198339961",
"259402792237631932817976871648821881307",
"227657605161246802334359074133188249311",
"309347575207434126786854231581854089777",
"162013745865881399461282369914826136297",
"155911692936289697244062125260198339961",
"259402792237631932817976871648821881307",
"93285727189992489464427883400903677131",
"32798568290502969602557680885603266423",
"40245338381117295131934480131775603472",
"70499051964044188882457645832283758828",
"126317629108340972586234451308556234679",
"227657605161246802334359074133188249311",
"309347575207434126786854231581854089777",
"162013745865881399461282369914826136297",
"155911692936289697244062125260198339961",
"259402792237631932817976871648821881307",
"37778161543885274734671519937120795795",
"249971004709279868042009998008644599787",
"110182310158059797837809102972243975597",
"149225252540418144105916073508421406124",
"237077802897524759884063616725821473211",
"68083432606367573660277956724381157107",
"272667501733416391757838733000504222114",
"106084408473336494793402988035362344206",
"189715441446877677242437137648067096265",
"112763037947700643545971038545538762345",
"72541109799895909549157051211552189116",
"278975732450196822392837406825035124835",
"86972117840086068760296220000834869140",
"122877437752474558289010868587265135698",
"178118431424121272950616748383493096334",
"317417996895109283627699486845869416037",
"158837059348151063340840241852481425273",
"77900603047241292040443569843762428076",
"18774962818057917158357072925861743473",
"139152984816137507393950751130951896697",
"231687840069463963184428407520958095294",
"137762464015826228281214753371198162652",
"65464315969268471980736552926675321042",
"61991648796497890255060592665198937051",
"320099998660135783200824844666075614097",
"329544241963909069325749795414877780017",
"201623761411241321183354520613078126853",
"75748408919712093818035408198074402747",
"102657822574713210112329624539574049889",
"30103629211944726439899245616852891494",
"302033031132809053555119689759005687848",
"93378497168229351399520447943946072884",
"258771121839594552126686788217007503312",
"95246992825394481999394294871785585519",
"105699065944549422838070729022950628273",
"76932010778241929812907432165064977680",
"191564316331040455270765427135397160519",
"195173753815480676462970293781542666437",
"205908435787044043416857598367695390756",
"21647695828531333431073320071642163050",
"133309826631540499775595604751610860763",
"256148326040256977477698165151066334712",
"49672903990833466562092980398926155391",
"48985626793218379705310281216938295126",
"248855252504150377774216548641241089400",
"44481470730721859681224986059147508526",
"142353755902171917054437009654222559011",
"15695026823218062652520045748423377840",
"277872258029657916494027508676821624595",
"183493042084957460217425240756961424786",
"2394687961089309085316661024548380895",
"304817424783457260950188399721615785355",
"38319177000567458541326239903498022143",
"143063865716628474810388544567660929501",
"233724195214861261257761129892064066323",
"83194993599505026717159026857671371945",
"327666947658036478573787144117755226633",
"112098506839293868189232543448307952350",
"337784235489609341193695514120959495103",
"326706986059025237167884815510753873763",
"287480835276576937753924538733023824829",
"198225637936451119492956108849330197647",
"330307488376020683264767172625353125722",
"5487886151474879217373255707482031246",
"216733481785972319249751847388698491132",
"160853819200322170291570775402017706",
"121496057312801172208110134654319219032",
"301810604399832075383333622130394035252",
"128793424810777908950139486453465700042",
"21659902727855655749602110159419973430",
"191804479227981373375210598624134328030",
"5487886151474879217373255707482031246",
"216733481785972319249751847388698491132",
"160853819200322170291570775402017706",
"121496057312801172208110134654319219032",
"301810604399832075383333622130394035252",
"128793424810777908950139486453465700042",
"149551397188652088192785547252828787762",
"154677349147258723405300161582037879325",
"235172409261793405065310809575676218064",
"296749360704139334359472707011752117837",
"306902656012568877904245946842344705588",
"212507455487243157794713677292932423217",
"324479859380577410738535752408519142043",
"277945609850028680315160053512254788743",
"26668540342342737774548095177562704326",
"45600226903108142807259980404697609932",
"300777666365035899838825196852197340659",
"186169630803937253773330644554038466421",
"23426040596979307498990126875836449718",
"34588315208747866782642073872464535468",
"75006010700817072077720101025805860558",
"134583324289169678169088233987598570759",
"69511505606834297260324281457269874116",
"127179307582888630599752032311620685882",
"333602313961053271656386604648857847085",
"67422983866444379855814811235557032343",
"125588542549300484461197398926963223656",
"174392527954108582079996612394789807789",
"211895668777446568014231625112008752309",
"210070515352900074073195285011548260448",
"235511088623951413583752306298285967372",
"268451969427165536899843929121454468097",
"79873928132938429023009793467430850418",
"191377222089544245075164279779912577168",
"302653922870949698964080113871592781401",
"92896351948499449298651074689421459807"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_setup_read_suspend"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/7867f4a57560bf9fc4a931e37ba02b7a3e9f406b",
"id": "CVE-2026-45328-f0866ec3",
"signature_version": "v1",
"digest": {
"function_hash": "290273743467552009310262483972200228384",
"length": 94.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_aes_crypt_cbc"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-f6a341cd",
"signature_version": "v1",
"digest": {
"function_hash": "117433597587519446598280648739031280761",
"length": 450.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_mmu_hal_vaddr_to_paddr"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-f731ca0c",
"signature_version": "v1",
"digest": {
"function_hash": "26111237731698604278276945993972540361",
"length": 216.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/components/tee_ota_ops/esp_tee_ota_ops.c",
"function": "esp_tee_ota_write"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-f8ef0608",
"signature_version": "v1",
"digest": {
"function_hash": "175069993103929722896936475206424603136",
"length": 818.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_aes_crypt_cfb8"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-fab84ef1",
"signature_version": "v1",
"digest": {
"function_hash": "117433597587519446598280648739031280761",
"length": 450.0
}
},
{
"signature_type": "Line",
"target": {
"file": "components/esp_tee/subproject/main/common/multi_heap.c"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/145ba4c42dc8283054cfde9a1c3470db7399192f",
"id": "CVE-2026-45328-fbd545b5",
"signature_version": "v1",
"digest": {
"line_hashes": [
"175858594811677782431503023722432476094",
"131630921575358928994058125685856460780",
"15908588244074761831049838149364145922",
"127178942594319200756991301987176968299",
"168615428499289416017660387409639575435"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services_iram.c",
"function": "_ss_spi_flash_hal_check_status"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-fe003632",
"signature_version": "v1",
"digest": {
"function_hash": "305148560463794313365999651028358570527",
"length": 64.0
}
},
{
"signature_type": "Function",
"target": {
"file": "components/esp_tee/subproject/main/core/esp_secure_services.c",
"function": "_ss_esp_tee_ota_write"
},
"deprecated": false,
"source": "https://github.com/espressif/esp-idf/commit/eebabaff2fdc273b1530fe66e55fb3bcd181dfd6",
"id": "CVE-2026-45328-fe583a58",
"signature_version": "v1",
"digest": {
"function_hash": "261525811991496363322672714585696835004",
"length": 272.0
}
}
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-45328.json"