CVE-2026-55687

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-55687
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55687.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-55687
Aliases
  • GHSA-v6r2-f6p2-88cj
Published
2026-07-10T15:59:31Z
Modified
2026-08-12T16:41:23Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing
Details

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Versions 6.0.1, 5.5.4, 5.4.4, 5.3.5, and possibly prior contain an out-of-bounds write in jpeg_parse_dqt_marker() in components/esp_driver_jpeg/jpeg_parse_marker.c because the attacker-controlled DQT marker Tq nibble is used as an index into the qt_tbl array without validating that it is in the range 0..3, allowing malformed JPEG input to corrupt stack memory and reliably trigger a denial of service. This issue is fixed in version 6.0.2 and is expected to be fixed in versions 5.5.5, 5.4.5, and 5.3.6.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-121",
        "CWE-787"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55687.json"
}
References

Affected packages

Git / github.com/espressif/esp-idf

Affected ranges

Type
GIT
Repo
https://github.com/espressif/esp-idf
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
303c01305acb8ae5c4eb24a1786300681b4822a4
Fixed
6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77
Fixed
7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1
Fixed
82c5c2dad45313786fb7e973059bc9094d95c3b2
Fixed
f2df45bcedef11354e83c31a9718d680a68422c4
Fixed
7101770dc6db2667b3c477cc31365dd1acd6db4e
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "6.0.0"
        },
        {
            "fixed": "6.0.2"
        },
        {
            "introduced": "5.5.0"
        },
        {
            "last_affected": "5.5.4"
        },
        {
            "introduced": "5.4.0"
        },
        {
            "last_affected": "5.4.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.3.5"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

v0.*
v0.9
v1.*
v1.0
v2.*
v2.0-rc1
v2.1-rc1
v3.*
v3.0-dev
v3.1-beta1
v3.1-dev
v3.2-beta1
v3.2-dev
v3.3-beta1
v3.3-beta2
v3.3-dev
v4.*
v4.0-dev
v4.1-dev
v4.2-dev
v4.3-beta1
v4.3-dev
v5.*
v5.0-beta1
v5.0-dev
v5.2-dev
v5.3
v5.3-beta1
v5.3-beta2
v5.3-rc1
v5.4-beta2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55687.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "69694885694968196691929174141064083169",
            "length": 1486
        },
        "id": "CVE-2026-55687-0747e78a",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_decode.c",
            "function": "jpeg_decoder_get_info"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "274285629202364722089337070333232601455",
                "73653623164700201186992235063811005692",
                "119494969391069433888075168664304163336",
                "137784318747514579467605757014932616034"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-55687-0a32c369",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_private.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "195567810159066831615448989914195237633",
            "length": 2411
        },
        "id": "CVE-2026-55687-0c95dc9c",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_decode.c",
            "function": "jpeg_parse_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "175916023877827809882774644020473221186",
                "116909910456720503439151783500449097220",
                "336075348487365554208073648033766046348",
                "118046066335227515523968204029327030252",
                "338047657776486039675653286780954120459",
                "191926082019561248051820543457943476314",
                "253141956513705890079533789536958227066",
                "186436367613822611357656043619356312985",
                "162652152949599252021203348358539792230",
                "63838847544760543707714345001672452241",
                "216065827589910275210194566977404777931",
                "88663770750880621931013853152476969713",
                "333303835978860514770210313987466192518",
                "320963006809066173065449023381559988197",
                "153958193492557908910772145666268199041",
                "249984519296316013243784382723480258267",
                "171512205483367213372359885434589218209",
                "178596872851515838695787790845921861716",
                "222899816357221725926313748857406448913",
                "100127773383716460315991159344392778196",
                "141757672308743120943997281449982710002",
                "272544368593836318623335703946934453550",
                "271238653349718681206061585728714255113",
                "10926098858521638104419893249358361973",
                "111785113296853457102049216676975247862",
                "199479093322781514298012503125601497059",
                "203521396145601893988684671838708929094",
                "202422109376842348640873390971512352396",
                "107270020619693118073553662679238817807",
                "113095650294129776529291610275576352358",
                "61407259004397122248993514633267342680",
                "146925084460222831584730387052562063851",
                "25037684323648576653787275233513730463",
                "254840216456374375918280020963278042948",
                "63033232070539410540781854929917870085",
                "241906837373362366769805886921565362958",
                "233166945453704563100398363604100316377",
                "102827496558113210966456366369709667403",
                "6415447344284959637119566951884114075",
                "35039805703045215194778322087947541298",
                "299576898021064615646084569434167211530",
                "327208145409637031796646252109142149580",
                "235884273835591218756587560217345993723",
                "118895377894830322967493129330035567618",
                "37485517269199603705431336256053669944",
                "86613991652025899004311097013009091892",
                "38704198886757457554634318364309806748",
                "269842606545103969998981737954439849019",
                "175822172920830798473261630560074494333",
                "315433905084623754977358878654813412594",
                "148048017482095158010523401103650176776",
                "252019412124664097703921656180207664656",
                "117163456213337109432074963305823942752",
                "302224754355686924886166110357905919370",
                "127074236311658190739565135101767396023",
                "308023470595051761259331277894697979539",
                "586138518933078720222714035020700850",
                "96343192873010407016183428277130966015",
                "258100139738127969097015453790895060212",
                "323458598771763220166311075301134520835",
                "203667551698472996168682557138401880056",
                "261011466937145208718694133752248175798",
                "120116144984066396627618395491525577471",
                "214409059984687519749862892612676425481",
                "238547179549127894598060263284445616305",
                "186491062417453097738783750131228465457",
                "241546235612823744950431192524907243253",
                "228771756015206058437068030299852521769",
                "327834858832790058014435192738551095373",
                "284872027674864222903657690393860359514",
                "283876716769219929365081605524277609038",
                "279589716810071318962100652608766940595",
                "319470734019518412035316123636260575855",
                "280384665502583971761653224129680855473",
                "180884474978799820626542903594821564818",
                "174896909327146808710353595543476081624",
                "259619748200830182007144031996817294284",
                "194010446256391207177942268955148352146",
                "206232805711676453109044498741540400442",
                "32456263872069356123342586683131915057",
                "35952904096580135278624324921616346147",
                "225017210628595911938869191718837774880",
                "205900495083782155466898127190105699704",
                "156433879730322936976833066657300797215",
                "224404555985263708060353609051846011167",
                "88200226681434429880985960981692089623"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-55687-0d5da1c0",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "69694885694968196691929174141064083169",
            "length": 1486
        },
        "id": "CVE-2026-55687-1204e1b8",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_decode.c",
            "function": "jpeg_decoder_get_info"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "146846598182245131488296382525405519528",
            "length": 473
        },
        "id": "CVE-2026-55687-122fa34f",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_com_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "136830592330769264422398975329913876709",
                "156996467658622061955048332572133819021",
                "63557824660786172557290985148197371946",
                "262268961389249084111143379204244847189",
                "320349282242598402502986066768909814922",
                "139512609884743970663862830926591406021",
                "241688751505847296990392626440151981296",
                "133841861774418705314693677705838591543",
                "141785491948590848713265943085734971725",
                "26858230063993009086038619929775919719",
                "41643865667957817615925949347038326386",
                "329554164291684290277296157350590796478",
                "37492963983163057386492662517736231656",
                "172234242299594505836725960910276790801",
                "270066604924916840427396095522222494909",
                "186514039017817704225085627095827759286",
                "25715308801902100851393797844571741343",
                "312316156161002719657746449031488171698",
                "150652522894754807484125856963067387086",
                "105125327466358596346523685789042548302",
                "138714585379348258563404858832914165824",
                "225527212820893069716208436047148460671",
                "304747496165435766700200566627237780317",
                "230718294824534901350113032110373962607",
                "6158515405346841126734234648955405440",
                "295722562859503251515548219062571597793",
                "162662257262211916521994923331843789044",
                "42806603098708378815093502546537292206",
                "287817909238592365145061105233903523278",
                "305306879698102437989907157924473954848",
                "169218413297867799176048293576508482551",
                "267434640337594413557573888012707126737",
                "279776699847576861862370625146086333395",
                "235572004011702485029617990201287537930",
                "79480331471328110735765938377181750306",
                "220427639229579414119458012203616883301",
                "269448169816757451732252677106906542416",
                "133222764263576812072619583574714565418",
                "134531465196421963669244289162287802970",
                "157387553733051840787650951655994331092",
                "166347437778374353419082302849008260014",
                "160845786774585032163375256281648567320",
                "241887073648810343407820833132073297461",
                "317100890888580433496910013351975569892",
                "163465544269640714122207621646000078594",
                "199219909948393599880308925751008917745",
                "173758799867903414299670769123055292234",
                "333380275595501062971256238214220616100",
                "278451993756959140041633168347233562800",
                "111216747668659909436746520252905838737",
                "97714330759700113548436459623934001337",
                "236009327882013844454289237107206904044",
                "264546572539963457139831348745890677216",
                "233246503130328968784024451567204180487",
                "236981676999951824909684446808986201838",
                "223616379243750470243840122731087669982",
                "234183203748696875746361545865937902172",
                "7378977817898750802621909717860451964",
                "190137585021695344200039510447916260087",
                "280757495026438826218151989779468133778",
                "222711981462045635052788576896039294263"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-55687-12c5a8e2",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_decode.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "223061305894760272750031821087229208559",
            "length": 414
        },
        "id": "CVE-2026-55687-17eb7ae8",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_appn_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "195567810159066831615448989914195237633",
            "length": 2411
        },
        "id": "CVE-2026-55687-195c2028",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_decode.c",
            "function": "jpeg_parse_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "69694885694968196691929174141064083169",
            "length": 1486
        },
        "id": "CVE-2026-55687-1a420996",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_decode.c",
            "function": "jpeg_decoder_get_info"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "275011043250446438921571484106770588299",
            "length": 907
        },
        "id": "CVE-2026-55687-27a5bd15",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_dqt_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "195664296962233585768717315824024815888",
            "length": 963
        },
        "id": "CVE-2026-55687-35df83b8",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_dht_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "175916023877827809882774644020473221186",
                "116909910456720503439151783500449097220",
                "336075348487365554208073648033766046348",
                "178273769586418919448789973501564096927",
                "150778541597429541175179440029202421708",
                "133593004599467841507523342056774779158",
                "303182931326311317671503342809450155260",
                "186436367613822611357656043619356312985",
                "162652152949599252021203348358539792230",
                "286075957458208143840293930574374858923",
                "153052854737973250731413721867943283897",
                "21907771718801404801394088877234022281",
                "78382386745664981930080534719036090759",
                "192139401034600077673398064527594403172",
                "23212243125603288737764110230044207337",
                "249984519296316013243784382723480258267",
                "260299158754985020796892108075974161052",
                "74072511261018572849324209967635983171",
                "249662659603336457525239450790387898757",
                "237681703918411775910818720238773890901",
                "141757672308743120943997281449982710002",
                "272544368593836318623335703946934453550",
                "250984810255017974959247080123609478537",
                "52986661785199949751386538646385711836",
                "106720514103495299468513726852403526771",
                "175282433262989346282046574822817291827",
                "337563351420798772956632121844164301907",
                "322064073192689039448717147523932837888",
                "142272075999801555691126097080939659195",
                "17788040111560999600603810539953608185",
                "197715409795671767174465675399903469220",
                "50209818975080860243827448462201678261",
                "169476967072610345306124007682197314220",
                "23294144106221732177985443624450479218",
                "63033232070539410540781854929917870085",
                "241906837373362366769805886921565362958",
                "233166945453704563100398363604100316377",
                "102827496558113210966456366369709667403",
                "6415447344284959637119566951884114075",
                "35039805703045215194778322087947541298",
                "299576898021064615646084569434167211530",
                "327208145409637031796646252109142149580",
                "235884273835591218756587560217345993723",
                "118895377894830322967493129330035567618",
                "37485517269199603705431336256053669944",
                "86613991652025899004311097013009091892",
                "38704198886757457554634318364309806748",
                "269842606545103969998981737954439849019",
                "175822172920830798473261630560074494333",
                "315433905084623754977358878654813412594",
                "148048017482095158010523401103650176776",
                "252019412124664097703921656180207664656",
                "117163456213337109432074963305823942752",
                "302224754355686924886166110357905919370",
                "127074236311658190739565135101767396023",
                "308023470595051761259331277894697979539",
                "586138518933078720222714035020700850",
                "96343192873010407016183428277130966015",
                "258100139738127969097015453790895060212",
                "323458598771763220166311075301134520835",
                "203667551698472996168682557138401880056",
                "57530297313664765355844731409692735720",
                "78007373125828724733657033040168299725",
                "136061843251824000894828906679339049715",
                "324422482077940893488617777626400302764",
                "186491062417453097738783750131228465457",
                "241546235612823744950431192524907243253",
                "228771756015206058437068030299852521769",
                "327834858832790058014435192738551095373",
                "284872027674864222903657690393860359514",
                "283876716769219929365081605524277609038",
                "279589716810071318962100652608766940595",
                "319470734019518412035316123636260575855",
                "209447463535563157952490804374126366933",
                "210568641663212646567291797465145100245",
                "5585954672262793302587052337683907819",
                "190158219880035127053268206679287281801",
                "194010446256391207177942268955148352146",
                "206232805711676453109044498741540400442",
                "32456263872069356123342586683131915057",
                "35952904096580135278624324921616346147",
                "225017210628595911938869191718837774880",
                "205900495083782155466898127190105699704",
                "156433879730322936976833066657300797215",
                "224404555985263708060353609051846011167",
                "88200226681434429880985960981692089623"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-55687-361222ba",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "183009578596031628157510925747539139551",
            "length": 997
        },
        "id": "CVE-2026-55687-36e5121c",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_dht_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "183009578596031628157510925747539139551",
            "length": 997
        },
        "id": "CVE-2026-55687-5041d9b2",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_dht_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "195567810159066831615448989914195237633",
            "length": 2411
        },
        "id": "CVE-2026-55687-5426a83b",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_decode.c",
            "function": "jpeg_parse_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "69694885694968196691929174141064083169",
            "length": 1486
        },
        "id": "CVE-2026-55687-565fa486",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_decode.c",
            "function": "jpeg_decoder_get_info"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "274285629202364722089337070333232601455",
                "73653623164700201186992235063811005692",
                "119494969391069433888075168664304163336",
                "137784318747514579467605757014932616034"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-55687-57f284d4",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_private.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "146846598182245131488296382525405519528",
            "length": 473
        },
        "id": "CVE-2026-55687-5a495840",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_com_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "205951942902697279196359945232255926155",
            "length": 288
        },
        "id": "CVE-2026-55687-5bdf10a2",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_dri_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "136830592330769264422398975329913876709",
                "156996467658622061955048332572133819021",
                "63557824660786172557290985148197371946",
                "262268961389249084111143379204244847189",
                "320349282242598402502986066768909814922",
                "139512609884743970663862830926591406021",
                "241688751505847296990392626440151981296",
                "133841861774418705314693677705838591543",
                "141785491948590848713265943085734971725",
                "26858230063993009086038619929775919719",
                "41643865667957817615925949347038326386",
                "329554164291684290277296157350590796478",
                "37492963983163057386492662517736231656",
                "172234242299594505836725960910276790801",
                "270066604924916840427396095522222494909",
                "186514039017817704225085627095827759286",
                "25715308801902100851393797844571741343",
                "312316156161002719657746449031488171698",
                "150652522894754807484125856963067387086",
                "105125327466358596346523685789042548302",
                "138714585379348258563404858832914165824",
                "225527212820893069716208436047148460671",
                "304747496165435766700200566627237780317",
                "230718294824534901350113032110373962607",
                "6158515405346841126734234648955405440",
                "295722562859503251515548219062571597793",
                "162662257262211916521994923331843789044",
                "42806603098708378815093502546537292206",
                "287817909238592365145061105233903523278",
                "305306879698102437989907157924473954848",
                "169218413297867799176048293576508482551",
                "267434640337594413557573888012707126737",
                "279776699847576861862370625146086333395",
                "235572004011702485029617990201287537930",
                "79480331471328110735765938377181750306",
                "220427639229579414119458012203616883301",
                "269448169816757451732252677106906542416",
                "133222764263576812072619583574714565418",
                "66811869005456870961603246861930215971",
                "6534246800148363590166485545594583188",
                "166347437778374353419082302849008260014",
                "160845786774585032163375256281648567320",
                "241887073648810343407820833132073297461",
                "317100890888580433496910013351975569892",
                "163465544269640714122207621646000078594",
                "199219909948393599880308925751008917745",
                "173758799867903414299670769123055292234",
                "333380275595501062971256238214220616100",
                "278451993756959140041633168347233562800",
                "111216747668659909436746520252905838737",
                "97714330759700113548436459623934001337",
                "236009327882013844454289237107206904044",
                "264546572539963457139831348745890677216",
                "233246503130328968784024451567204180487",
                "236981676999951824909684446808986201838",
                "223616379243750470243840122731087669982",
                "234183203748696875746361545865937902172",
                "7378977817898750802621909717860451964",
                "190137585021695344200039510447916260087",
                "280757495026438826218151989779468133778",
                "222711981462045635052788576896039294263"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-55687-64e3070b",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_decode.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "175916023877827809882774644020473221186",
                "116909910456720503439151783500449097220",
                "336075348487365554208073648033766046348",
                "178273769586418919448789973501564096927",
                "150778541597429541175179440029202421708",
                "133593004599467841507523342056774779158",
                "303182931326311317671503342809450155260",
                "186436367613822611357656043619356312985",
                "162652152949599252021203348358539792230",
                "286075957458208143840293930574374858923",
                "153052854737973250731413721867943283897",
                "21907771718801404801394088877234022281",
                "78382386745664981930080534719036090759",
                "192139401034600077673398064527594403172",
                "23212243125603288737764110230044207337",
                "249984519296316013243784382723480258267",
                "260299158754985020796892108075974161052",
                "74072511261018572849324209967635983171",
                "249662659603336457525239450790387898757",
                "237681703918411775910818720238773890901",
                "141757672308743120943997281449982710002",
                "272544368593836318623335703946934453550",
                "250984810255017974959247080123609478537",
                "52986661785199949751386538646385711836",
                "106720514103495299468513726852403526771",
                "175282433262989346282046574822817291827",
                "337563351420798772956632121844164301907",
                "322064073192689039448717147523932837888",
                "142272075999801555691126097080939659195",
                "17788040111560999600603810539953608185",
                "197715409795671767174465675399903469220",
                "50209818975080860243827448462201678261",
                "169476967072610345306124007682197314220",
                "23294144106221732177985443624450479218",
                "63033232070539410540781854929917870085",
                "241906837373362366769805886921565362958",
                "233166945453704563100398363604100316377",
                "102827496558113210966456366369709667403",
                "6415447344284959637119566951884114075",
                "35039805703045215194778322087947541298",
                "299576898021064615646084569434167211530",
                "327208145409637031796646252109142149580",
                "235884273835591218756587560217345993723",
                "118895377894830322967493129330035567618",
                "37485517269199603705431336256053669944",
                "86613991652025899004311097013009091892",
                "38704198886757457554634318364309806748",
                "269842606545103969998981737954439849019",
                "175822172920830798473261630560074494333",
                "315433905084623754977358878654813412594",
                "148048017482095158010523401103650176776",
                "252019412124664097703921656180207664656",
                "117163456213337109432074963305823942752",
                "302224754355686924886166110357905919370",
                "127074236311658190739565135101767396023",
                "308023470595051761259331277894697979539",
                "586138518933078720222714035020700850",
                "96343192873010407016183428277130966015",
                "258100139738127969097015453790895060212",
                "323458598771763220166311075301134520835",
                "203667551698472996168682557138401880056",
                "57530297313664765355844731409692735720",
                "78007373125828724733657033040168299725",
                "136061843251824000894828906679339049715",
                "324422482077940893488617777626400302764",
                "186491062417453097738783750131228465457",
                "241546235612823744950431192524907243253",
                "228771756015206058437068030299852521769",
                "327834858832790058014435192738551095373",
                "284872027674864222903657690393860359514",
                "283876716769219929365081605524277609038",
                "279589716810071318962100652608766940595",
                "319470734019518412035316123636260575855",
                "209447463535563157952490804374126366933",
                "210568641663212646567291797465145100245",
                "5585954672262793302587052337683907819",
                "190158219880035127053268206679287281801",
                "194010446256391207177942268955148352146",
                "206232805711676453109044498741540400442",
                "32456263872069356123342586683131915057",
                "35952904096580135278624324921616346147",
                "225017210628595911938869191718837774880",
                "205900495083782155466898127190105699704",
                "156433879730322936976833066657300797215",
                "224404555985263708060353609051846011167",
                "88200226681434429880985960981692089623"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-55687-723baa56",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "302283741079978687692284853680114863599",
                "136830592330769264422398975329913876709",
                "156996467658622061955048332572133819021",
                "63557824660786172557290985148197371946",
                "262268961389249084111143379204244847189",
                "320349282242598402502986066768909814922",
                "139512609884743970663862830926591406021",
                "241688751505847296990392626440151981296",
                "133841861774418705314693677705838591543",
                "141785491948590848713265943085734971725",
                "26858230063993009086038619929775919719",
                "41643865667957817615925949347038326386",
                "329554164291684290277296157350590796478",
                "37492963983163057386492662517736231656",
                "172234242299594505836725960910276790801",
                "270066604924916840427396095522222494909",
                "186514039017817704225085627095827759286",
                "25715308801902100851393797844571741343",
                "312316156161002719657746449031488171698",
                "150652522894754807484125856963067387086",
                "105125327466358596346523685789042548302",
                "138714585379348258563404858832914165824",
                "225527212820893069716208436047148460671",
                "304747496165435766700200566627237780317",
                "230718294824534901350113032110373962607",
                "6158515405346841126734234648955405440",
                "295722562859503251515548219062571597793",
                "162662257262211916521994923331843789044",
                "42806603098708378815093502546537292206",
                "287817909238592365145061105233903523278",
                "305306879698102437989907157924473954848",
                "169218413297867799176048293576508482551",
                "267434640337594413557573888012707126737",
                "279776699847576861862370625146086333395",
                "235572004011702485029617990201287537930",
                "79480331471328110735765938377181750306",
                "220427639229579414119458012203616883301",
                "269448169816757451732252677106906542416",
                "133222764263576812072619583574714565418",
                "66811869005456870961603246861930215971",
                "6534246800148363590166485545594583188",
                "166347437778374353419082302849008260014",
                "160845786774585032163375256281648567320",
                "241887073648810343407820833132073297461",
                "317100890888580433496910013351975569892",
                "163465544269640714122207621646000078594",
                "199219909948393599880308925751008917745",
                "173758799867903414299670769123055292234",
                "333380275595501062971256238214220616100",
                "278451993756959140041633168347233562800",
                "111216747668659909436746520252905838737",
                "97714330759700113548436459623934001337",
                "236009327882013844454289237107206904044",
                "264546572539963457139831348745890677216",
                "233246503130328968784024451567204180487",
                "236981676999951824909684446808986201838",
                "223616379243750470243840122731087669982",
                "234183203748696875746361545865937902172",
                "7378977817898750802621909717860451964",
                "190137585021695344200039510447916260087",
                "280757495026438826218151989779468133778",
                "222711981462045635052788576896039294263"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-55687-777a1f71",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_decode.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "187721385409611263691601070233785857523",
            "length": 282
        },
        "id": "CVE-2026-55687-82b22c0f",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_dri_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "175916023877827809882774644020473221186",
                "116909910456720503439151783500449097220",
                "336075348487365554208073648033766046348",
                "178273769586418919448789973501564096927",
                "150778541597429541175179440029202421708",
                "133593004599467841507523342056774779158",
                "303182931326311317671503342809450155260",
                "186436367613822611357656043619356312985",
                "162652152949599252021203348358539792230",
                "286075957458208143840293930574374858923",
                "153052854737973250731413721867943283897",
                "21907771718801404801394088877234022281",
                "78382386745664981930080534719036090759",
                "192139401034600077673398064527594403172",
                "23212243125603288737764110230044207337",
                "249984519296316013243784382723480258267",
                "260299158754985020796892108075974161052",
                "74072511261018572849324209967635983171",
                "249662659603336457525239450790387898757",
                "237681703918411775910818720238773890901",
                "141757672308743120943997281449982710002",
                "272544368593836318623335703946934453550",
                "250984810255017974959247080123609478537",
                "52986661785199949751386538646385711836",
                "106720514103495299468513726852403526771",
                "175282433262989346282046574822817291827",
                "337563351420798772956632121844164301907",
                "322064073192689039448717147523932837888",
                "142272075999801555691126097080939659195",
                "17788040111560999600603810539953608185",
                "197715409795671767174465675399903469220",
                "50209818975080860243827448462201678261",
                "169476967072610345306124007682197314220",
                "23294144106221732177985443624450479218",
                "63033232070539410540781854929917870085",
                "241906837373362366769805886921565362958",
                "233166945453704563100398363604100316377",
                "102827496558113210966456366369709667403",
                "6415447344284959637119566951884114075",
                "35039805703045215194778322087947541298",
                "299576898021064615646084569434167211530",
                "327208145409637031796646252109142149580",
                "235884273835591218756587560217345993723",
                "118895377894830322967493129330035567618",
                "37485517269199603705431336256053669944",
                "86613991652025899004311097013009091892",
                "38704198886757457554634318364309806748",
                "269842606545103969998981737954439849019",
                "175822172920830798473261630560074494333",
                "315433905084623754977358878654813412594",
                "148048017482095158010523401103650176776",
                "252019412124664097703921656180207664656",
                "117163456213337109432074963305823942752",
                "302224754355686924886166110357905919370",
                "127074236311658190739565135101767396023",
                "308023470595051761259331277894697979539",
                "586138518933078720222714035020700850",
                "96343192873010407016183428277130966015",
                "258100139738127969097015453790895060212",
                "323458598771763220166311075301134520835",
                "203667551698472996168682557138401880056",
                "57530297313664765355844731409692735720",
                "78007373125828724733657033040168299725",
                "136061843251824000894828906679339049715",
                "324422482077940893488617777626400302764",
                "186491062417453097738783750131228465457",
                "241546235612823744950431192524907243253",
                "228771756015206058437068030299852521769",
                "327834858832790058014435192738551095373",
                "284872027674864222903657690393860359514",
                "283876716769219929365081605524277609038",
                "279589716810071318962100652608766940595",
                "319470734019518412035316123636260575855",
                "209447463535563157952490804374126366933",
                "210568641663212646567291797465145100245",
                "5585954672262793302587052337683907819",
                "190158219880035127053268206679287281801",
                "194010446256391207177942268955148352146",
                "206232805711676453109044498741540400442",
                "32456263872069356123342586683131915057",
                "35952904096580135278624324921616346147",
                "225017210628595911938869191718837774880",
                "205900495083782155466898127190105699704",
                "156433879730322936976833066657300797215",
                "224404555985263708060353609051846011167",
                "88200226681434429880985960981692089623"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-55687-93708958",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "311375445205577778781703948269314115792",
            "length": 839
        },
        "id": "CVE-2026-55687-9602b2da",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_dqt_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "275011043250446438921571484106770588299",
            "length": 907
        },
        "id": "CVE-2026-55687-9bd86d92",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_dqt_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "113979112561149162958240121140423842594",
            "length": 475
        },
        "id": "CVE-2026-55687-9e8112b3",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_appn_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "116012087218698718096759928913050717544",
            "length": 440
        },
        "id": "CVE-2026-55687-a4211a91",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_com_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "113979112561149162958240121140423842594",
            "length": 475
        },
        "id": "CVE-2026-55687-a58980e8",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_appn_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "275011043250446438921571484106770588299",
            "length": 907
        },
        "id": "CVE-2026-55687-af154935",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_dqt_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "274285629202364722089337070333232601455",
                "73653623164700201186992235063811005692",
                "119494969391069433888075168664304163336",
                "137784318747514579467605757014932616034"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-55687-afd21d7f",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_private.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "204543725057186960513049616750024274428",
            "length": 442
        },
        "id": "CVE-2026-55687-b0f6df60",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_appn_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "224690942387500678291028108202281839528",
            "length": 1400
        },
        "id": "CVE-2026-55687-b13e164d",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_sof_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "195664296962233585768717315824024815888",
            "length": 963
        },
        "id": "CVE-2026-55687-b27cd75e",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_dht_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "183009578596031628157510925747539139551",
            "length": 997
        },
        "id": "CVE-2026-55687-b99b741f",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_dht_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "205951942902697279196359945232255926155",
            "length": 288
        },
        "id": "CVE-2026-55687-ba23c8c1",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_dri_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "81241478057366009316851145487009668342",
            "length": 412
        },
        "id": "CVE-2026-55687-ba3b2b45",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_com_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "11612485010539244172516253809338505700",
            "length": 1362
        },
        "id": "CVE-2026-55687-bdbb3c2a",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_sof_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "175916023877827809882774644020473221186",
                "116909910456720503439151783500449097220",
                "336075348487365554208073648033766046348",
                "118046066335227515523968204029327030252",
                "338047657776486039675653286780954120459",
                "132881208750346664305475092834230812870",
                "281302321782917917216733698997414149579",
                "186436367613822611357656043619356312985",
                "162652152949599252021203348358539792230",
                "63838847544760543707714345001672452241",
                "216065827589910275210194566977404777931",
                "163036178005194157921814577542761520879",
                "60180728607812121411464508802542976943",
                "275186649609175855729186566519524120319",
                "224727939331119567032432413841013772762",
                "249984519296316013243784382723480258267",
                "171512205483367213372359885434589218209",
                "178596872851515838695787790845921861716",
                "222899816357221725926313748857406448913",
                "100127773383716460315991159344392778196",
                "141757672308743120943997281449982710002",
                "272544368593836318623335703946934453550",
                "271238653349718681206061585728714255113",
                "10926098858521638104419893249358361973",
                "111785113296853457102049216676975247862",
                "199479093322781514298012503125601497059",
                "203521396145601893988684671838708929094",
                "202422109376842348640873390971512352396",
                "107270020619693118073553662679238817807",
                "113095650294129776529291610275576352358",
                "61407259004397122248993514633267342680",
                "146925084460222831584730387052562063851",
                "25037684323648576653787275233513730463",
                "254840216456374375918280020963278042948",
                "63033232070539410540781854929917870085",
                "241906837373362366769805886921565362958",
                "233166945453704563100398363604100316377",
                "102827496558113210966456366369709667403",
                "6415447344284959637119566951884114075",
                "35039805703045215194778322087947541298",
                "299576898021064615646084569434167211530",
                "327208145409637031796646252109142149580",
                "235884273835591218756587560217345993723",
                "118895377894830322967493129330035567618",
                "37485517269199603705431336256053669944",
                "86613991652025899004311097013009091892",
                "38704198886757457554634318364309806748",
                "269842606545103969998981737954439849019",
                "175822172920830798473261630560074494333",
                "315433905084623754977358878654813412594",
                "148048017482095158010523401103650176776",
                "252019412124664097703921656180207664656",
                "117163456213337109432074963305823942752",
                "302224754355686924886166110357905919370",
                "127074236311658190739565135101767396023",
                "308023470595051761259331277894697979539",
                "586138518933078720222714035020700850",
                "96343192873010407016183428277130966015",
                "258100139738127969097015453790895060212",
                "323458598771763220166311075301134520835",
                "203667551698472996168682557138401880056",
                "261011466937145208718694133752248175798",
                "120116144984066396627618395491525577471",
                "214409059984687519749862892612676425481",
                "238547179549127894598060263284445616305",
                "186491062417453097738783750131228465457",
                "241546235612823744950431192524907243253",
                "228771756015206058437068030299852521769",
                "327834858832790058014435192738551095373",
                "284872027674864222903657690393860359514",
                "283876716769219929365081605524277609038",
                "279589716810071318962100652608766940595",
                "319470734019518412035316123636260575855",
                "280384665502583971761653224129680855473",
                "180884474978799820626542903594821564818",
                "174896909327146808710353595543476081624",
                "259619748200830182007144031996817294284",
                "194010446256391207177942268955148352146",
                "206232805711676453109044498741540400442",
                "32456263872069356123342586683131915057",
                "84857571550966907458144538803762593305",
                "82803032316365749015288801457805556808",
                "320372871646659156860119204863711751871",
                "28536942343892755717106575375398473895",
                "224404555985263708060353609051846011167",
                "88200226681434429880985960981692089623"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-55687-cabd56b9",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "11612485010539244172516253809338505700",
            "length": 1362
        },
        "id": "CVE-2026-55687-cbb89a24",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_sof_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "69694885694968196691929174141064083169",
            "length": 1486
        },
        "id": "CVE-2026-55687-ce2dc52e",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_decode.c",
            "function": "jpeg_decoder_get_info"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "224690942387500678291028108202281839528",
            "length": 1400
        },
        "id": "CVE-2026-55687-cef92880",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_sof_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "195567810159066831615448989914195237633",
            "length": 2411
        },
        "id": "CVE-2026-55687-cfaeb18c",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_decode.c",
            "function": "jpeg_parse_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "274285629202364722089337070333232601455",
                "73653623164700201186992235063811005692",
                "119494969391069433888075168664304163336",
                "137784318747514579467605757014932616034"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-55687-d3224e05",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/303c01305acb8ae5c4eb24a1786300681b4822a4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_private.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "136830592330769264422398975329913876709",
                "156996467658622061955048332572133819021",
                "63557824660786172557290985148197371946",
                "262268961389249084111143379204244847189",
                "320349282242598402502986066768909814922",
                "139512609884743970663862830926591406021",
                "241688751505847296990392626440151981296",
                "133841861774418705314693677705838591543",
                "141785491948590848713265943085734971725",
                "26858230063993009086038619929775919719",
                "41643865667957817615925949347038326386",
                "329554164291684290277296157350590796478",
                "37492963983163057386492662517736231656",
                "172234242299594505836725960910276790801",
                "270066604924916840427396095522222494909",
                "186514039017817704225085627095827759286",
                "25715308801902100851393797844571741343",
                "312316156161002719657746449031488171698",
                "150652522894754807484125856963067387086",
                "105125327466358596346523685789042548302",
                "138714585379348258563404858832914165824",
                "225527212820893069716208436047148460671",
                "304747496165435766700200566627237780317",
                "230718294824534901350113032110373962607",
                "6158515405346841126734234648955405440",
                "295722562859503251515548219062571597793",
                "162662257262211916521994923331843789044",
                "42806603098708378815093502546537292206",
                "287817909238592365145061105233903523278",
                "305306879698102437989907157924473954848",
                "169218413297867799176048293576508482551",
                "267434640337594413557573888012707126737",
                "279776699847576861862370625146086333395",
                "235572004011702485029617990201287537930",
                "79480331471328110735765938377181750306",
                "220427639229579414119458012203616883301",
                "269448169816757451732252677106906542416",
                "133222764263576812072619583574714565418",
                "134531465196421963669244289162287802970",
                "157387553733051840787650951655994331092",
                "166347437778374353419082302849008260014",
                "160845786774585032163375256281648567320",
                "241887073648810343407820833132073297461",
                "317100890888580433496910013351975569892",
                "163465544269640714122207621646000078594",
                "199219909948393599880308925751008917745",
                "173758799867903414299670769123055292234",
                "333380275595501062971256238214220616100",
                "278451993756959140041633168347233562800",
                "111216747668659909436746520252905838737",
                "97714330759700113548436459623934001337",
                "236009327882013844454289237107206904044",
                "264546572539963457139831348745890677216",
                "233246503130328968784024451567204180487",
                "236981676999951824909684446808986201838",
                "223616379243750470243840122731087669982",
                "234183203748696875746361545865937902172",
                "7378977817898750802621909717860451964",
                "190137585021695344200039510447916260087",
                "280757495026438826218151989779468133778",
                "222711981462045635052788576896039294263"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-55687-dbec33a1",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/6ffafe8e93142ef8ffe51a6311d4abfc0f10fe77",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_decode.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "311375445205577778781703948269314115792",
            "length": 839
        },
        "id": "CVE-2026-55687-de051f0c",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_dqt_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "146846598182245131488296382525405519528",
            "length": 473
        },
        "id": "CVE-2026-55687-e3cf4f18",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_com_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "195567810159066831615448989914195237633",
            "length": 2411
        },
        "id": "CVE-2026-55687-e6b2241a",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_decode.c",
            "function": "jpeg_parse_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "11612485010539244172516253809338505700",
            "length": 1362
        },
        "id": "CVE-2026-55687-eba4c7bc",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_sof_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "205951942902697279196359945232255926155",
            "length": 288
        },
        "id": "CVE-2026-55687-ef3efea1",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_dri_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "274285629202364722089337070333232601455",
                "73653623164700201186992235063811005692",
                "119494969391069433888075168664304163336",
                "137784318747514579467605757014932616034"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-55687-f00d3933",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_private.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "113979112561149162958240121140423842594",
            "length": 475
        },
        "id": "CVE-2026-55687-f9ee9a63",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/f2df45bcedef11354e83c31a9718d680a68422c4",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_appn_marker"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "302283741079978687692284853680114863599",
                "136830592330769264422398975329913876709",
                "156996467658622061955048332572133819021",
                "63557824660786172557290985148197371946",
                "262268961389249084111143379204244847189",
                "320349282242598402502986066768909814922",
                "139512609884743970663862830926591406021",
                "241688751505847296990392626440151981296",
                "133841861774418705314693677705838591543",
                "141785491948590848713265943085734971725",
                "26858230063993009086038619929775919719",
                "41643865667957817615925949347038326386",
                "329554164291684290277296157350590796478",
                "37492963983163057386492662517736231656",
                "172234242299594505836725960910276790801",
                "270066604924916840427396095522222494909",
                "186514039017817704225085627095827759286",
                "25715308801902100851393797844571741343",
                "312316156161002719657746449031488171698",
                "150652522894754807484125856963067387086",
                "105125327466358596346523685789042548302",
                "138714585379348258563404858832914165824",
                "225527212820893069716208436047148460671",
                "304747496165435766700200566627237780317",
                "230718294824534901350113032110373962607",
                "6158515405346841126734234648955405440",
                "295722562859503251515548219062571597793",
                "162662257262211916521994923331843789044",
                "42806603098708378815093502546537292206",
                "287817909238592365145061105233903523278",
                "305306879698102437989907157924473954848",
                "169218413297867799176048293576508482551",
                "267434640337594413557573888012707126737",
                "279776699847576861862370625146086333395",
                "235572004011702485029617990201287537930",
                "79480331471328110735765938377181750306",
                "220427639229579414119458012203616883301",
                "269448169816757451732252677106906542416",
                "133222764263576812072619583574714565418",
                "66811869005456870961603246861930215971",
                "6534246800148363590166485545594583188",
                "166347437778374353419082302849008260014",
                "160845786774585032163375256281648567320",
                "241887073648810343407820833132073297461",
                "317100890888580433496910013351975569892",
                "163465544269640714122207621646000078594",
                "199219909948393599880308925751008917745",
                "173758799867903414299670769123055292234",
                "333380275595501062971256238214220616100",
                "278451993756959140041633168347233562800",
                "111216747668659909436746520252905838737",
                "97714330759700113548436459623934001337",
                "236009327882013844454289237107206904044",
                "264546572539963457139831348745890677216",
                "233246503130328968784024451567204180487",
                "236981676999951824909684446808986201838",
                "223616379243750470243840122731087669982",
                "234183203748696875746361545865937902172",
                "7378977817898750802621909717860451964",
                "190137585021695344200039510447916260087",
                "280757495026438826218151989779468133778",
                "222711981462045635052788576896039294263"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-55687-fdefb031",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/7ccfc00f39faf1b7e5919f45b56fe44ba699d7c1",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_decode.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "205951942902697279196359945232255926155",
            "length": 288
        },
        "id": "CVE-2026-55687-fe0cfc64",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/82c5c2dad45313786fb7e973059bc9094d95c3b2",
        "target": {
            "file": "components/esp_driver_jpeg/jpeg_parse_marker.c",
            "function": "jpeg_parse_dri_marker"
        }
    }
]
vanir_signatures_modified 
"2026-08-12T16:41:23Z"