CVE-2026-81507

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-81507
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-81507.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-81507
Aliases
  • GHSA-v335-fxwc-rc44
Published
2026-10-13T15:12:01Z
Modified
2026-10-28T11:18:05Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
ESF-IDF: Bluetooth Classic L2CAP Heap Memory Disclosure Allowing Unauthorized Access to Sensitive Data
Details

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Prior to 5.2.8, 5.3.6, 5.5.5, 6.0.3, and 6.1-rc1, ESP-IDF BlueDroid L2CAP configuration-option processing in l2c_main.c and l2c_utils.c does not consistently validate option lengths against the remaining received packet bytes. A remote unauthenticated BR/EDR peer within radio range can send a malformed L2CAP configuration request that causes an out-of-bounds read, and under some runtime conditions limited adjacent Bluetooth stack memory can be included in an outbound L2CAP Configuration Response. The issue affects ESP32-class products using the BlueDroid host stack with Classic Bluetooth enabled. This issue is fixed in 5.2.8, 5.3.6, 5.5.5, 6.0.3, and 6.1-rc1.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-125"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/81xxx/CVE-2026-81507.json"
}
References

Affected packages

Git / github.com/espressif/esp-idf

Affected ranges

Type
GIT
Repo
https://github.com/espressif/esp-idf
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
530b95fc293b465142dcb4bc82d55ef09d7ad9c0
Introduced
ea010f84ef878dda07146244e166930738c1c103
Fixed
79e3454c68248bd7d881721c9b2e94561378a8ce
Introduced
64b9d85a766f182c571fd1f515ce127dfcdc9a46
Fixed
b774170ff46c393eeb5e495ea37936038d3f4f4f
Introduced
d9ad0ad50b3c8025f42e89e03dd3d1bd1b06890a
Fixed
76f5dedd9950a3012fee8fb7d5586df21fc67802
Introduced
b1d13e9fe441c4f75e240c98a26fd631b7b3232f
Fixed
44f0c59f7c81a72a5868a52d5f6dfbbf88829704
Fixed
14c99559b4337cabcf0f09c21d16b93c4cd7a6fe
Fixed
1e07f6d83ca892630a7210df2958455f7ca77b4a
Fixed
5731c63ece128f156939b9f734256e2227c1442a
Fixed
8de265dc44b1b22c749ea44ee7c609b3da4162f0
Fixed
9a6d04f65e0e341e7d72bd417c9f31b8a04ce846
Fixed
c2610255a5adce651ca582bb82368c3dd0ee2834
Fixed
c8cd8f4f3019ae2f912c8cbe9974445e8d9b8749
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "5.2.8"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "introduced": "5.3-beta1"
                },
                {
                    "fixed": "5.3.6"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "introduced": "5.4-beta1"
                },
                {
                    "fixed": "5.5.5"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "introduced": "6.0-beta1"
                },
                {
                    "fixed": "6.0.3"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "introduced": "6.1-beta1"
                },
                {
                    "fixed": "6.1-rc1"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "fixed": "14c99559b4337cabcf0f09c21d16b93c4cd7a6fe"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "1e07f6d83ca892630a7210df2958455f7ca77b4a"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "5731c63ece128f156939b9f734256e2227c1442a"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "8de265dc44b1b22c749ea44ee7c609b3da4162f0"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "9a6d04f65e0e341e7d72bd417c9f31b8a04ce846"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "c2610255a5adce651ca582bb82368c3dd0ee2834"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "c8cd8f4f3019ae2f912c8cbe9974445e8d9b8749"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "original_tag": "v5.2.8",
            "range": [
                {
                    "fixed": "530b95fc293b465142dcb4bc82d55ef09d7ad9c0"
                }
            ],
            "source": "REFERENCES_TAG"
        },
        {
            "original_tag": "v5.3.6",
            "range": [
                {
                    "fixed": "79e3454c68248bd7d881721c9b2e94561378a8ce"
                }
            ],
            "source": "REFERENCES_TAG"
        },
        {
            "original_tag": "v5.5.5",
            "range": [
                {
                    "fixed": "b774170ff46c393eeb5e495ea37936038d3f4f4f"
                }
            ],
            "source": "REFERENCES_TAG"
        },
        {
            "original_tag": "v6.0.3",
            "range": [
                {
                    "fixed": "76f5dedd9950a3012fee8fb7d5586df21fc67802"
                }
            ],
            "source": "REFERENCES_TAG"
        },
        {
            "original_tag": "v6.1-rc1",
            "range": [
                {
                    "fixed": "44f0c59f7c81a72a5868a52d5f6dfbbf88829704"
                }
            ],
            "source": "REFERENCES_TAG"
        }
    ]
}

Affected versions

v0.*
v0.9
v1.*
v1.0
v2.*
v2.0-rc1
v2.1-rc1
v3.*
v3.0-dev
v3.1-beta1
v3.1-dev
v3.2-beta1
v3.2-dev
v3.3-beta1
v3.3-beta2
v3.3-dev
v4.*
v4.0-dev
v4.1-dev
v4.2-dev
v4.3-beta1
v4.3-dev
v5.*
v5.0-beta1
v5.0-dev
v5.2
v5.2-beta1
v5.2-beta2
v5.2-dev
v5.2-rc1
v5.3
v5.3-beta1
v5.3-beta2
v5.3-rc1
v5.4-beta2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-81507.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "130250710368556082138097665836051751892",
                "232091156559456406922513912714388690781",
                "226187901279827209033531475515859169962",
                "138158029392015065746930261149622821615",
                "157591681984217191471690407656019518061",
                "98099127054845440459963203430430107627",
                "254797885993043081179141945776431503279",
                "205942893568780012575673069891262237684",
                "249153003109530088747474884658831781511",
                "126180449399212723311018404757542286064",
                "398288969257531836129326446745372445",
                "181267558280295421505121595763406819292",
                "121163648747084865843702964046192274644",
                "73715164734288857324437124651837358457",
                "36952972258598615373741393548447454091",
                "91025071115939229637863932579389520396",
                "182423664471726378407818597745153996244",
                "168756657842857559643977488994310301731",
                "85620839173130894803886925262073661314",
                "288403122999399935569097764348522616262",
                "264098986087494519198244097491625424558",
                "256064554017530289155593997674046808875",
                "82710906510568917516412163926600500906",
                "202947805891136128445890741401506028203",
                "308082041765916894358637005200457447633",
                "214775464948563779464894419757135028792",
                "317615506945089440974293346598019967429",
                "330127898633988095037596225258531506759",
                "226859969585643975665587065405774642434",
                "104715481599702018390021977663472662734",
                "163566109788270465703797461716215673046",
                "207564621230297596112538321724926530667",
                "311819314285317713378991283834421096004",
                "236732265184660035366467935863000898408"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-81507-15fbe7a2",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/8de265dc44b1b22c749ea44ee7c609b3da4162f0",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_utils.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "11346739570954985810444459427927445380",
            "length": 2364
        },
        "id": "CVE-2026-81507-1b809a8b",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/c8cd8f4f3019ae2f912c8cbe9974445e8d9b8749",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_utils.c",
            "function": "l2cu_send_peer_config_rej"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "130250710368556082138097665836051751892",
                "232091156559456406922513912714388690781",
                "226187901279827209033531475515859169962",
                "138158029392015065746930261149622821615",
                "157591681984217191471690407656019518061",
                "98099127054845440459963203430430107627",
                "254797885993043081179141945776431503279",
                "205942893568780012575673069891262237684",
                "249153003109530088747474884658831781511",
                "126180449399212723311018404757542286064",
                "398288969257531836129326446745372445",
                "181267558280295421505121595763406819292",
                "121163648747084865843702964046192274644",
                "73715164734288857324437124651837358457",
                "36952972258598615373741393548447454091",
                "91025071115939229637863932579389520396",
                "182423664471726378407818597745153996244",
                "168756657842857559643977488994310301731",
                "85620839173130894803886925262073661314",
                "288403122999399935569097764348522616262",
                "264098986087494519198244097491625424558",
                "256064554017530289155593997674046808875",
                "82710906510568917516412163926600500906",
                "202947805891136128445890741401506028203",
                "308082041765916894358637005200457447633",
                "214775464948563779464894419757135028792",
                "317615506945089440974293346598019967429",
                "330127898633988095037596225258531506759",
                "226859969585643975665587065405774642434",
                "104715481599702018390021977663472662734",
                "163566109788270465703797461716215673046",
                "207564621230297596112538321724926530667",
                "311819314285317713378991283834421096004",
                "236732265184660035366467935863000898408"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-81507-1db575c9",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/9a6d04f65e0e341e7d72bd417c9f31b8a04ce846",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_utils.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "130250710368556082138097665836051751892",
                "232091156559456406922513912714388690781",
                "226187901279827209033531475515859169962",
                "138158029392015065746930261149622821615",
                "157591681984217191471690407656019518061",
                "98099127054845440459963203430430107627",
                "254797885993043081179141945776431503279",
                "205942893568780012575673069891262237684",
                "249153003109530088747474884658831781511",
                "126180449399212723311018404757542286064",
                "398288969257531836129326446745372445",
                "181267558280295421505121595763406819292",
                "121163648747084865843702964046192274644",
                "73715164734288857324437124651837358457",
                "36952972258598615373741393548447454091",
                "91025071115939229637863932579389520396",
                "182423664471726378407818597745153996244",
                "168756657842857559643977488994310301731",
                "85620839173130894803886925262073661314",
                "288403122999399935569097764348522616262",
                "264098986087494519198244097491625424558",
                "256064554017530289155593997674046808875",
                "82710906510568917516412163926600500906",
                "202947805891136128445890741401506028203",
                "308082041765916894358637005200457447633",
                "214775464948563779464894419757135028792",
                "317615506945089440974293346598019967429",
                "330127898633988095037596225258531506759",
                "226859969585643975665587065405774642434",
                "104715481599702018390021977663472662734",
                "163566109788270465703797461716215673046",
                "207564621230297596112538321724926530667",
                "311819314285317713378991283834421096004",
                "236732265184660035366467935863000898408"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-81507-260c9c99",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/c2610255a5adce651ca582bb82368c3dd0ee2834",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_utils.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "278795085054551003396415450602150232014",
            "length": 10906
        },
        "id": "CVE-2026-81507-2baf2758",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/c2610255a5adce651ca582bb82368c3dd0ee2834",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_main.c",
            "function": "process_l2cap_cmd"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "278795085054551003396415450602150232014",
            "length": 10906
        },
        "id": "CVE-2026-81507-40ab35d6",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/14c99559b4337cabcf0f09c21d16b93c4cd7a6fe",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_main.c",
            "function": "process_l2cap_cmd"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "278795085054551003396415450602150232014",
            "length": 10906
        },
        "id": "CVE-2026-81507-43f58fa2",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/8de265dc44b1b22c749ea44ee7c609b3da4162f0",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_main.c",
            "function": "process_l2cap_cmd"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "278795085054551003396415450602150232014",
            "length": 10906
        },
        "id": "CVE-2026-81507-4c14efc6",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/1e07f6d83ca892630a7210df2958455f7ca77b4a",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_main.c",
            "function": "process_l2cap_cmd"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "11346739570954985810444459427927445380",
            "length": 2364
        },
        "id": "CVE-2026-81507-4d26e01a",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/14c99559b4337cabcf0f09c21d16b93c4cd7a6fe",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_utils.c",
            "function": "l2cu_send_peer_config_rej"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "159868185264745950622903431080332407211",
                "302935064624168089537916317755739510965",
                "57748832388003241513592431052938866412",
                "222840696075184761663303682323940852721",
                "132529578832939083286022408722920288786",
                "184209720298959234213912289303173656928",
                "12955841553684708413484152475800307297",
                "300971493835834084435955387726163166688",
                "101256594417754319465859638241046297023",
                "260401890970142057819417043187094266114",
                "218298277136932471671619252735262287120",
                "181269443936704324418929624514382020281",
                "301084080593826150460209227144237936272",
                "214891120308649792866498403035866261537",
                "57369766622526048779992877485858730836",
                "184016149568234463888352004638251573341",
                "303286579629010126392421591473253126407",
                "295274744315549900667700588117393060666",
                "312512850286558787476035296844481586220",
                "186638253567598352308066481526774584092",
                "135698931251088378317443904585889499289",
                "221332161541491333782032898167022920236",
                "15389797764558722747971182476281849307",
                "144677446064182764207095320682364454695",
                "149646539598364122238896109265965356517",
                "238373255797075909765341027329996484519",
                "55737241000869346015467645465728485257",
                "161456098597174652512388135229686448952",
                "189667595320736988310351168640594502220",
                "284433935104655263708621098751526110018",
                "3419133430995162795711478333018973901",
                "172170577827764744887590443325363930697",
                "39384094005150162976778825614636707429",
                "301522005916964477825179957233603991992",
                "197451795806331210139881378487529362168",
                "136532355208085639748300981685747225020",
                "196494381852988126546629179945655951829",
                "177482836644901414246374747321356332171",
                "77955635637011110660874850485593528939",
                "160288901171518591248189391522208959432",
                "64295492266284559707181859891355189500",
                "172205585807086451630130944322464178880",
                "292264409300129394590031131208874678439",
                "14568613486137927586513829255270470845",
                "147833992287984967149751304292985692737",
                "311025074306357931535978495828074510722",
                "154666211737986585007892193272655441097",
                "25665424311326664375856296273699516748",
                "311953720521153635285912722246541127316",
                "202708400164002289505130742563856769498",
                "41990867790795975327962323722284506451",
                "310186258029934940761447134900629745203",
                "112454740620225406568468322835722698539",
                "260401890970142057819417043187094266114",
                "218298277136932471671619252735262287120",
                "181269443936704324418929624514382020281",
                "301084080593826150460209227144237936272",
                "214891120308649792866498403035866261537",
                "57369766622526048779992877485858730836",
                "184016149568234463888352004638251573341",
                "303286579629010126392421591473253126407",
                "295274744315549900667700588117393060666",
                "312512850286558787476035296844481586220",
                "186638253567598352308066481526774584092",
                "135698931251088378317443904585889499289",
                "221332161541491333782032898167022920236",
                "15389797764558722747971182476281849307",
                "144677446064182764207095320682364454695",
                "149646539598364122238896109265965356517",
                "238373255797075909765341027329996484519",
                "55737241000869346015467645465728485257",
                "161456098597174652512388135229686448952",
                "189667595320736988310351168640594502220",
                "284433935104655263708621098751526110018",
                "3419133430995162795711478333018973901",
                "172170577827764744887590443325363930697",
                "39384094005150162976778825614636707429",
                "301522005916964477825179957233603991992",
                "197451795806331210139881378487529362168",
                "136532355208085639748300981685747225020",
                "71722917733000276860330519659627867836",
                "336551782455375114507738894354076110311",
                "143956987692686523273186865167367954266",
                "177440564371031816175966971257946756122"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-81507-4db88c35",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/9a6d04f65e0e341e7d72bd417c9f31b8a04ce846",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_main.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "11346739570954985810444459427927445380",
            "length": 2364
        },
        "id": "CVE-2026-81507-686e539c",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/8de265dc44b1b22c749ea44ee7c609b3da4162f0",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_utils.c",
            "function": "l2cu_send_peer_config_rej"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "278795085054551003396415450602150232014",
            "length": 10906
        },
        "id": "CVE-2026-81507-6c6a3e69",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/9a6d04f65e0e341e7d72bd417c9f31b8a04ce846",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_main.c",
            "function": "process_l2cap_cmd"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "278795085054551003396415450602150232014",
            "length": 10906
        },
        "id": "CVE-2026-81507-7a3b4a1f",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/5731c63ece128f156939b9f734256e2227c1442a",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_main.c",
            "function": "process_l2cap_cmd"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "11346739570954985810444459427927445380",
            "length": 2364
        },
        "id": "CVE-2026-81507-829e7ddd",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/5731c63ece128f156939b9f734256e2227c1442a",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_utils.c",
            "function": "l2cu_send_peer_config_rej"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "130250710368556082138097665836051751892",
                "232091156559456406922513912714388690781",
                "226187901279827209033531475515859169962",
                "138158029392015065746930261149622821615",
                "157591681984217191471690407656019518061",
                "98099127054845440459963203430430107627",
                "254797885993043081179141945776431503279",
                "205942893568780012575673069891262237684",
                "249153003109530088747474884658831781511",
                "126180449399212723311018404757542286064",
                "398288969257531836129326446745372445",
                "181267558280295421505121595763406819292",
                "121163648747084865843702964046192274644",
                "73715164734288857324437124651837358457",
                "36952972258598615373741393548447454091",
                "91025071115939229637863932579389520396",
                "182423664471726378407818597745153996244",
                "168756657842857559643977488994310301731",
                "85620839173130894803886925262073661314",
                "288403122999399935569097764348522616262",
                "264098986087494519198244097491625424558",
                "256064554017530289155593997674046808875",
                "82710906510568917516412163926600500906",
                "202947805891136128445890741401506028203",
                "308082041765916894358637005200457447633",
                "214775464948563779464894419757135028792",
                "317615506945089440974293346598019967429",
                "330127898633988095037596225258531506759",
                "226859969585643975665587065405774642434",
                "104715481599702018390021977663472662734",
                "163566109788270465703797461716215673046",
                "207564621230297596112538321724926530667",
                "311819314285317713378991283834421096004",
                "236732265184660035366467935863000898408"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-81507-ac0a0eb5",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/1e07f6d83ca892630a7210df2958455f7ca77b4a",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_utils.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "11346739570954985810444459427927445380",
            "length": 2364
        },
        "id": "CVE-2026-81507-bad720a3",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/c2610255a5adce651ca582bb82368c3dd0ee2834",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_utils.c",
            "function": "l2cu_send_peer_config_rej"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "159868185264745950622903431080332407211",
                "302935064624168089537916317755739510965",
                "57748832388003241513592431052938866412",
                "222840696075184761663303682323940852721",
                "132529578832939083286022408722920288786",
                "184209720298959234213912289303173656928",
                "12955841553684708413484152475800307297",
                "300971493835834084435955387726163166688",
                "101256594417754319465859638241046297023",
                "260401890970142057819417043187094266114",
                "218298277136932471671619252735262287120",
                "181269443936704324418929624514382020281",
                "301084080593826150460209227144237936272",
                "214891120308649792866498403035866261537",
                "57369766622526048779992877485858730836",
                "184016149568234463888352004638251573341",
                "303286579629010126392421591473253126407",
                "295274744315549900667700588117393060666",
                "312512850286558787476035296844481586220",
                "186638253567598352308066481526774584092",
                "135698931251088378317443904585889499289",
                "221332161541491333782032898167022920236",
                "15389797764558722747971182476281849307",
                "144677446064182764207095320682364454695",
                "149646539598364122238896109265965356517",
                "238373255797075909765341027329996484519",
                "55737241000869346015467645465728485257",
                "161456098597174652512388135229686448952",
                "189667595320736988310351168640594502220",
                "284433935104655263708621098751526110018",
                "3419133430995162795711478333018973901",
                "172170577827764744887590443325363930697",
                "39384094005150162976778825614636707429",
                "301522005916964477825179957233603991992",
                "197451795806331210139881378487529362168",
                "136532355208085639748300981685747225020",
                "196494381852988126546629179945655951829",
                "177482836644901414246374747321356332171",
                "77955635637011110660874850485593528939",
                "160288901171518591248189391522208959432",
                "64295492266284559707181859891355189500",
                "172205585807086451630130944322464178880",
                "292264409300129394590031131208874678439",
                "14568613486137927586513829255270470845",
                "147833992287984967149751304292985692737",
                "311025074306357931535978495828074510722",
                "154666211737986585007892193272655441097",
                "25665424311326664375856296273699516748",
                "311953720521153635285912722246541127316",
                "202708400164002289505130742563856769498",
                "41990867790795975327962323722284506451",
                "310186258029934940761447134900629745203",
                "112454740620225406568468322835722698539",
                "260401890970142057819417043187094266114",
                "218298277136932471671619252735262287120",
                "181269443936704324418929624514382020281",
                "301084080593826150460209227144237936272",
                "214891120308649792866498403035866261537",
                "57369766622526048779992877485858730836",
                "184016149568234463888352004638251573341",
                "303286579629010126392421591473253126407",
                "295274744315549900667700588117393060666",
                "312512850286558787476035296844481586220",
                "186638253567598352308066481526774584092",
                "135698931251088378317443904585889499289",
                "221332161541491333782032898167022920236",
                "15389797764558722747971182476281849307",
                "144677446064182764207095320682364454695",
                "149646539598364122238896109265965356517",
                "238373255797075909765341027329996484519",
                "55737241000869346015467645465728485257",
                "161456098597174652512388135229686448952",
                "189667595320736988310351168640594502220",
                "284433935104655263708621098751526110018",
                "3419133430995162795711478333018973901",
                "172170577827764744887590443325363930697",
                "39384094005150162976778825614636707429",
                "301522005916964477825179957233603991992",
                "197451795806331210139881378487529362168",
                "136532355208085639748300981685747225020",
                "71722917733000276860330519659627867836",
                "336551782455375114507738894354076110311",
                "143956987692686523273186865167367954266",
                "177440564371031816175966971257946756122"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-81507-bdcb9e8d",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/8de265dc44b1b22c749ea44ee7c609b3da4162f0",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_main.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "278795085054551003396415450602150232014",
            "length": 10906
        },
        "id": "CVE-2026-81507-bfda9171",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/c8cd8f4f3019ae2f912c8cbe9974445e8d9b8749",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_main.c",
            "function": "process_l2cap_cmd"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "11346739570954985810444459427927445380",
            "length": 2364
        },
        "id": "CVE-2026-81507-c157ff1b",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/9a6d04f65e0e341e7d72bd417c9f31b8a04ce846",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_utils.c",
            "function": "l2cu_send_peer_config_rej"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "159868185264745950622903431080332407211",
                "302935064624168089537916317755739510965",
                "57748832388003241513592431052938866412",
                "222840696075184761663303682323940852721",
                "132529578832939083286022408722920288786",
                "184209720298959234213912289303173656928",
                "12955841553684708413484152475800307297",
                "300971493835834084435955387726163166688",
                "101256594417754319465859638241046297023",
                "260401890970142057819417043187094266114",
                "218298277136932471671619252735262287120",
                "181269443936704324418929624514382020281",
                "301084080593826150460209227144237936272",
                "214891120308649792866498403035866261537",
                "57369766622526048779992877485858730836",
                "184016149568234463888352004638251573341",
                "303286579629010126392421591473253126407",
                "295274744315549900667700588117393060666",
                "312512850286558787476035296844481586220",
                "186638253567598352308066481526774584092",
                "135698931251088378317443904585889499289",
                "221332161541491333782032898167022920236",
                "15389797764558722747971182476281849307",
                "144677446064182764207095320682364454695",
                "149646539598364122238896109265965356517",
                "238373255797075909765341027329996484519",
                "55737241000869346015467645465728485257",
                "161456098597174652512388135229686448952",
                "189667595320736988310351168640594502220",
                "284433935104655263708621098751526110018",
                "3419133430995162795711478333018973901",
                "172170577827764744887590443325363930697",
                "39384094005150162976778825614636707429",
                "301522005916964477825179957233603991992",
                "197451795806331210139881378487529362168",
                "136532355208085639748300981685747225020",
                "196494381852988126546629179945655951829",
                "177482836644901414246374747321356332171",
                "77955635637011110660874850485593528939",
                "160288901171518591248189391522208959432",
                "64295492266284559707181859891355189500",
                "172205585807086451630130944322464178880",
                "292264409300129394590031131208874678439",
                "14568613486137927586513829255270470845",
                "147833992287984967149751304292985692737",
                "311025074306357931535978495828074510722",
                "154666211737986585007892193272655441097",
                "25665424311326664375856296273699516748",
                "311953720521153635285912722246541127316",
                "202708400164002289505130742563856769498",
                "41990867790795975327962323722284506451",
                "310186258029934940761447134900629745203",
                "112454740620225406568468322835722698539",
                "260401890970142057819417043187094266114",
                "218298277136932471671619252735262287120",
                "181269443936704324418929624514382020281",
                "301084080593826150460209227144237936272",
                "214891120308649792866498403035866261537",
                "57369766622526048779992877485858730836",
                "184016149568234463888352004638251573341",
                "303286579629010126392421591473253126407",
                "295274744315549900667700588117393060666",
                "312512850286558787476035296844481586220",
                "186638253567598352308066481526774584092",
                "135698931251088378317443904585889499289",
                "221332161541491333782032898167022920236",
                "15389797764558722747971182476281849307",
                "144677446064182764207095320682364454695",
                "149646539598364122238896109265965356517",
                "238373255797075909765341027329996484519",
                "55737241000869346015467645465728485257",
                "161456098597174652512388135229686448952",
                "189667595320736988310351168640594502220",
                "284433935104655263708621098751526110018",
                "3419133430995162795711478333018973901",
                "172170577827764744887590443325363930697",
                "39384094005150162976778825614636707429",
                "301522005916964477825179957233603991992",
                "197451795806331210139881378487529362168",
                "136532355208085639748300981685747225020",
                "71722917733000276860330519659627867836",
                "336551782455375114507738894354076110311",
                "143956987692686523273186865167367954266",
                "177440564371031816175966971257946756122"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-81507-c223a97c",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/c2610255a5adce651ca582bb82368c3dd0ee2834",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_main.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "130250710368556082138097665836051751892",
                "232091156559456406922513912714388690781",
                "226187901279827209033531475515859169962",
                "138158029392015065746930261149622821615",
                "157591681984217191471690407656019518061",
                "98099127054845440459963203430430107627",
                "254797885993043081179141945776431503279",
                "205942893568780012575673069891262237684",
                "249153003109530088747474884658831781511",
                "126180449399212723311018404757542286064",
                "398288969257531836129326446745372445",
                "181267558280295421505121595763406819292",
                "121163648747084865843702964046192274644",
                "73715164734288857324437124651837358457",
                "36952972258598615373741393548447454091",
                "91025071115939229637863932579389520396",
                "182423664471726378407818597745153996244",
                "168756657842857559643977488994310301731",
                "85620839173130894803886925262073661314",
                "288403122999399935569097764348522616262",
                "264098986087494519198244097491625424558",
                "256064554017530289155593997674046808875",
                "82710906510568917516412163926600500906",
                "202947805891136128445890741401506028203",
                "308082041765916894358637005200457447633",
                "214775464948563779464894419757135028792",
                "317615506945089440974293346598019967429",
                "330127898633988095037596225258531506759",
                "226859969585643975665587065405774642434",
                "104715481599702018390021977663472662734",
                "163566109788270465703797461716215673046",
                "207564621230297596112538321724926530667",
                "311819314285317713378991283834421096004",
                "236732265184660035366467935863000898408"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-81507-d4569b9e",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/5731c63ece128f156939b9f734256e2227c1442a",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_utils.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "159868185264745950622903431080332407211",
                "302935064624168089537916317755739510965",
                "57748832388003241513592431052938866412",
                "222840696075184761663303682323940852721",
                "132529578832939083286022408722920288786",
                "184209720298959234213912289303173656928",
                "12955841553684708413484152475800307297",
                "300971493835834084435955387726163166688",
                "101256594417754319465859638241046297023",
                "260401890970142057819417043187094266114",
                "218298277136932471671619252735262287120",
                "181269443936704324418929624514382020281",
                "301084080593826150460209227144237936272",
                "214891120308649792866498403035866261537",
                "57369766622526048779992877485858730836",
                "184016149568234463888352004638251573341",
                "303286579629010126392421591473253126407",
                "295274744315549900667700588117393060666",
                "312512850286558787476035296844481586220",
                "186638253567598352308066481526774584092",
                "135698931251088378317443904585889499289",
                "221332161541491333782032898167022920236",
                "15389797764558722747971182476281849307",
                "144677446064182764207095320682364454695",
                "149646539598364122238896109265965356517",
                "238373255797075909765341027329996484519",
                "55737241000869346015467645465728485257",
                "161456098597174652512388135229686448952",
                "189667595320736988310351168640594502220",
                "284433935104655263708621098751526110018",
                "3419133430995162795711478333018973901",
                "172170577827764744887590443325363930697",
                "39384094005150162976778825614636707429",
                "301522005916964477825179957233603991992",
                "197451795806331210139881378487529362168",
                "136532355208085639748300981685747225020",
                "196494381852988126546629179945655951829",
                "177482836644901414246374747321356332171",
                "77955635637011110660874850485593528939",
                "160288901171518591248189391522208959432",
                "64295492266284559707181859891355189500",
                "172205585807086451630130944322464178880",
                "292264409300129394590031131208874678439",
                "14568613486137927586513829255270470845",
                "147833992287984967149751304292985692737",
                "311025074306357931535978495828074510722",
                "154666211737986585007892193272655441097",
                "25665424311326664375856296273699516748",
                "311953720521153635285912722246541127316",
                "202708400164002289505130742563856769498",
                "41990867790795975327962323722284506451",
                "310186258029934940761447134900629745203",
                "112454740620225406568468322835722698539",
                "260401890970142057819417043187094266114",
                "218298277136932471671619252735262287120",
                "181269443936704324418929624514382020281",
                "301084080593826150460209227144237936272",
                "214891120308649792866498403035866261537",
                "57369766622526048779992877485858730836",
                "184016149568234463888352004638251573341",
                "303286579629010126392421591473253126407",
                "295274744315549900667700588117393060666",
                "312512850286558787476035296844481586220",
                "186638253567598352308066481526774584092",
                "135698931251088378317443904585889499289",
                "221332161541491333782032898167022920236",
                "15389797764558722747971182476281849307",
                "144677446064182764207095320682364454695",
                "149646539598364122238896109265965356517",
                "238373255797075909765341027329996484519",
                "55737241000869346015467645465728485257",
                "161456098597174652512388135229686448952",
                "189667595320736988310351168640594502220",
                "284433935104655263708621098751526110018",
                "3419133430995162795711478333018973901",
                "172170577827764744887590443325363930697",
                "39384094005150162976778825614636707429",
                "301522005916964477825179957233603991992",
                "197451795806331210139881378487529362168",
                "136532355208085639748300981685747225020",
                "71722917733000276860330519659627867836",
                "336551782455375114507738894354076110311",
                "143956987692686523273186865167367954266",
                "177440564371031816175966971257946756122"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-81507-dabcfdd8",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/c8cd8f4f3019ae2f912c8cbe9974445e8d9b8749",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_main.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "159868185264745950622903431080332407211",
                "302935064624168089537916317755739510965",
                "57748832388003241513592431052938866412",
                "222840696075184761663303682323940852721",
                "132529578832939083286022408722920288786",
                "184209720298959234213912289303173656928",
                "12955841553684708413484152475800307297",
                "300971493835834084435955387726163166688",
                "101256594417754319465859638241046297023",
                "260401890970142057819417043187094266114",
                "218298277136932471671619252735262287120",
                "181269443936704324418929624514382020281",
                "301084080593826150460209227144237936272",
                "214891120308649792866498403035866261537",
                "57369766622526048779992877485858730836",
                "184016149568234463888352004638251573341",
                "303286579629010126392421591473253126407",
                "295274744315549900667700588117393060666",
                "312512850286558787476035296844481586220",
                "186638253567598352308066481526774584092",
                "135698931251088378317443904585889499289",
                "221332161541491333782032898167022920236",
                "15389797764558722747971182476281849307",
                "144677446064182764207095320682364454695",
                "149646539598364122238896109265965356517",
                "238373255797075909765341027329996484519",
                "55737241000869346015467645465728485257",
                "161456098597174652512388135229686448952",
                "189667595320736988310351168640594502220",
                "284433935104655263708621098751526110018",
                "3419133430995162795711478333018973901",
                "172170577827764744887590443325363930697",
                "39384094005150162976778825614636707429",
                "301522005916964477825179957233603991992",
                "197451795806331210139881378487529362168",
                "136532355208085639748300981685747225020",
                "196494381852988126546629179945655951829",
                "177482836644901414246374747321356332171",
                "77955635637011110660874850485593528939",
                "160288901171518591248189391522208959432",
                "64295492266284559707181859891355189500",
                "172205585807086451630130944322464178880",
                "292264409300129394590031131208874678439",
                "14568613486137927586513829255270470845",
                "147833992287984967149751304292985692737",
                "311025074306357931535978495828074510722",
                "154666211737986585007892193272655441097",
                "25665424311326664375856296273699516748",
                "311953720521153635285912722246541127316",
                "202708400164002289505130742563856769498",
                "41990867790795975327962323722284506451",
                "310186258029934940761447134900629745203",
                "112454740620225406568468322835722698539",
                "260401890970142057819417043187094266114",
                "218298277136932471671619252735262287120",
                "181269443936704324418929624514382020281",
                "301084080593826150460209227144237936272",
                "214891120308649792866498403035866261537",
                "57369766622526048779992877485858730836",
                "184016149568234463888352004638251573341",
                "303286579629010126392421591473253126407",
                "295274744315549900667700588117393060666",
                "312512850286558787476035296844481586220",
                "186638253567598352308066481526774584092",
                "135698931251088378317443904585889499289",
                "221332161541491333782032898167022920236",
                "15389797764558722747971182476281849307",
                "144677446064182764207095320682364454695",
                "149646539598364122238896109265965356517",
                "238373255797075909765341027329996484519",
                "55737241000869346015467645465728485257",
                "161456098597174652512388135229686448952",
                "189667595320736988310351168640594502220",
                "284433935104655263708621098751526110018",
                "3419133430995162795711478333018973901",
                "172170577827764744887590443325363930697",
                "39384094005150162976778825614636707429",
                "301522005916964477825179957233603991992",
                "197451795806331210139881378487529362168",
                "136532355208085639748300981685747225020",
                "71722917733000276860330519659627867836",
                "336551782455375114507738894354076110311",
                "143956987692686523273186865167367954266",
                "177440564371031816175966971257946756122"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-81507-dfab5b8d",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/5731c63ece128f156939b9f734256e2227c1442a",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_main.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "159868185264745950622903431080332407211",
                "302935064624168089537916317755739510965",
                "57748832388003241513592431052938866412",
                "222840696075184761663303682323940852721",
                "132529578832939083286022408722920288786",
                "184209720298959234213912289303173656928",
                "12955841553684708413484152475800307297",
                "300971493835834084435955387726163166688",
                "101256594417754319465859638241046297023",
                "260401890970142057819417043187094266114",
                "218298277136932471671619252735262287120",
                "181269443936704324418929624514382020281",
                "301084080593826150460209227144237936272",
                "214891120308649792866498403035866261537",
                "57369766622526048779992877485858730836",
                "184016149568234463888352004638251573341",
                "303286579629010126392421591473253126407",
                "295274744315549900667700588117393060666",
                "312512850286558787476035296844481586220",
                "186638253567598352308066481526774584092",
                "135698931251088378317443904585889499289",
                "221332161541491333782032898167022920236",
                "15389797764558722747971182476281849307",
                "144677446064182764207095320682364454695",
                "149646539598364122238896109265965356517",
                "238373255797075909765341027329996484519",
                "55737241000869346015467645465728485257",
                "161456098597174652512388135229686448952",
                "189667595320736988310351168640594502220",
                "284433935104655263708621098751526110018",
                "3419133430995162795711478333018973901",
                "172170577827764744887590443325363930697",
                "39384094005150162976778825614636707429",
                "301522005916964477825179957233603991992",
                "197451795806331210139881378487529362168",
                "136532355208085639748300981685747225020",
                "196494381852988126546629179945655951829",
                "177482836644901414246374747321356332171",
                "77955635637011110660874850485593528939",
                "160288901171518591248189391522208959432",
                "64295492266284559707181859891355189500",
                "172205585807086451630130944322464178880",
                "292264409300129394590031131208874678439",
                "14568613486137927586513829255270470845",
                "147833992287984967149751304292985692737",
                "311025074306357931535978495828074510722",
                "154666211737986585007892193272655441097",
                "25665424311326664375856296273699516748",
                "311953720521153635285912722246541127316",
                "202708400164002289505130742563856769498",
                "41990867790795975327962323722284506451",
                "310186258029934940761447134900629745203",
                "112454740620225406568468322835722698539",
                "260401890970142057819417043187094266114",
                "218298277136932471671619252735262287120",
                "181269443936704324418929624514382020281",
                "301084080593826150460209227144237936272",
                "214891120308649792866498403035866261537",
                "57369766622526048779992877485858730836",
                "184016149568234463888352004638251573341",
                "303286579629010126392421591473253126407",
                "295274744315549900667700588117393060666",
                "312512850286558787476035296844481586220",
                "186638253567598352308066481526774584092",
                "135698931251088378317443904585889499289",
                "221332161541491333782032898167022920236",
                "15389797764558722747971182476281849307",
                "144677446064182764207095320682364454695",
                "149646539598364122238896109265965356517",
                "238373255797075909765341027329996484519",
                "55737241000869346015467645465728485257",
                "161456098597174652512388135229686448952",
                "189667595320736988310351168640594502220",
                "284433935104655263708621098751526110018",
                "3419133430995162795711478333018973901",
                "172170577827764744887590443325363930697",
                "39384094005150162976778825614636707429",
                "301522005916964477825179957233603991992",
                "197451795806331210139881378487529362168",
                "136532355208085639748300981685747225020",
                "71722917733000276860330519659627867836",
                "336551782455375114507738894354076110311",
                "143956987692686523273186865167367954266",
                "177440564371031816175966971257946756122"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-81507-e5b128fd",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/1e07f6d83ca892630a7210df2958455f7ca77b4a",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_main.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "159868185264745950622903431080332407211",
                "302935064624168089537916317755739510965",
                "57748832388003241513592431052938866412",
                "222840696075184761663303682323940852721",
                "132529578832939083286022408722920288786",
                "184209720298959234213912289303173656928",
                "12955841553684708413484152475800307297",
                "300971493835834084435955387726163166688",
                "101256594417754319465859638241046297023",
                "260401890970142057819417043187094266114",
                "218298277136932471671619252735262287120",
                "181269443936704324418929624514382020281",
                "301084080593826150460209227144237936272",
                "214891120308649792866498403035866261537",
                "57369766622526048779992877485858730836",
                "184016149568234463888352004638251573341",
                "303286579629010126392421591473253126407",
                "295274744315549900667700588117393060666",
                "312512850286558787476035296844481586220",
                "186638253567598352308066481526774584092",
                "135698931251088378317443904585889499289",
                "221332161541491333782032898167022920236",
                "15389797764558722747971182476281849307",
                "144677446064182764207095320682364454695",
                "149646539598364122238896109265965356517",
                "238373255797075909765341027329996484519",
                "55737241000869346015467645465728485257",
                "161456098597174652512388135229686448952",
                "189667595320736988310351168640594502220",
                "284433935104655263708621098751526110018",
                "3419133430995162795711478333018973901",
                "172170577827764744887590443325363930697",
                "39384094005150162976778825614636707429",
                "301522005916964477825179957233603991992",
                "197451795806331210139881378487529362168",
                "136532355208085639748300981685747225020",
                "196494381852988126546629179945655951829",
                "177482836644901414246374747321356332171",
                "77955635637011110660874850485593528939",
                "160288901171518591248189391522208959432",
                "64295492266284559707181859891355189500",
                "172205585807086451630130944322464178880",
                "292264409300129394590031131208874678439",
                "14568613486137927586513829255270470845",
                "147833992287984967149751304292985692737",
                "311025074306357931535978495828074510722",
                "154666211737986585007892193272655441097",
                "25665424311326664375856296273699516748",
                "311953720521153635285912722246541127316",
                "202708400164002289505130742563856769498",
                "41990867790795975327962323722284506451",
                "310186258029934940761447134900629745203",
                "112454740620225406568468322835722698539",
                "260401890970142057819417043187094266114",
                "218298277136932471671619252735262287120",
                "181269443936704324418929624514382020281",
                "301084080593826150460209227144237936272",
                "214891120308649792866498403035866261537",
                "57369766622526048779992877485858730836",
                "184016149568234463888352004638251573341",
                "303286579629010126392421591473253126407",
                "295274744315549900667700588117393060666",
                "312512850286558787476035296844481586220",
                "186638253567598352308066481526774584092",
                "135698931251088378317443904585889499289",
                "221332161541491333782032898167022920236",
                "15389797764558722747971182476281849307",
                "144677446064182764207095320682364454695",
                "149646539598364122238896109265965356517",
                "238373255797075909765341027329996484519",
                "55737241000869346015467645465728485257",
                "161456098597174652512388135229686448952",
                "189667595320736988310351168640594502220",
                "284433935104655263708621098751526110018",
                "3419133430995162795711478333018973901",
                "172170577827764744887590443325363930697",
                "39384094005150162976778825614636707429",
                "301522005916964477825179957233603991992",
                "197451795806331210139881378487529362168",
                "136532355208085639748300981685747225020",
                "71722917733000276860330519659627867836",
                "336551782455375114507738894354076110311",
                "143956987692686523273186865167367954266",
                "177440564371031816175966971257946756122"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-81507-e5ba682a",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/14c99559b4337cabcf0f09c21d16b93c4cd7a6fe",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_main.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "11346739570954985810444459427927445380",
            "length": 2364
        },
        "id": "CVE-2026-81507-f0932df4",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/1e07f6d83ca892630a7210df2958455f7ca77b4a",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_utils.c",
            "function": "l2cu_send_peer_config_rej"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "130250710368556082138097665836051751892",
                "232091156559456406922513912714388690781",
                "226187901279827209033531475515859169962",
                "138158029392015065746930261149622821615",
                "157591681984217191471690407656019518061",
                "98099127054845440459963203430430107627",
                "254797885993043081179141945776431503279",
                "205942893568780012575673069891262237684",
                "249153003109530088747474884658831781511",
                "126180449399212723311018404757542286064",
                "398288969257531836129326446745372445",
                "181267558280295421505121595763406819292",
                "121163648747084865843702964046192274644",
                "73715164734288857324437124651837358457",
                "36952972258598615373741393548447454091",
                "91025071115939229637863932579389520396",
                "182423664471726378407818597745153996244",
                "168756657842857559643977488994310301731",
                "85620839173130894803886925262073661314",
                "288403122999399935569097764348522616262",
                "264098986087494519198244097491625424558",
                "256064554017530289155593997674046808875",
                "82710906510568917516412163926600500906",
                "202947805891136128445890741401506028203",
                "308082041765916894358637005200457447633",
                "214775464948563779464894419757135028792",
                "317615506945089440974293346598019967429",
                "330127898633988095037596225258531506759",
                "226859969585643975665587065405774642434",
                "104715481599702018390021977663472662734",
                "163566109788270465703797461716215673046",
                "207564621230297596112538321724926530667",
                "311819314285317713378991283834421096004",
                "236732265184660035366467935863000898408"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-81507-f33116e3",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/c8cd8f4f3019ae2f912c8cbe9974445e8d9b8749",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_utils.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "130250710368556082138097665836051751892",
                "232091156559456406922513912714388690781",
                "226187901279827209033531475515859169962",
                "138158029392015065746930261149622821615",
                "157591681984217191471690407656019518061",
                "98099127054845440459963203430430107627",
                "254797885993043081179141945776431503279",
                "205942893568780012575673069891262237684",
                "249153003109530088747474884658831781511",
                "126180449399212723311018404757542286064",
                "398288969257531836129326446745372445",
                "181267558280295421505121595763406819292",
                "121163648747084865843702964046192274644",
                "73715164734288857324437124651837358457",
                "36952972258598615373741393548447454091",
                "91025071115939229637863932579389520396",
                "182423664471726378407818597745153996244",
                "168756657842857559643977488994310301731",
                "85620839173130894803886925262073661314",
                "288403122999399935569097764348522616262",
                "264098986087494519198244097491625424558",
                "256064554017530289155593997674046808875",
                "82710906510568917516412163926600500906",
                "202947805891136128445890741401506028203",
                "308082041765916894358637005200457447633",
                "214775464948563779464894419757135028792",
                "317615506945089440974293346598019967429",
                "330127898633988095037596225258531506759",
                "226859969585643975665587065405774642434",
                "104715481599702018390021977663472662734",
                "163566109788270465703797461716215673046",
                "207564621230297596112538321724926530667",
                "311819314285317713378991283834421096004",
                "236732265184660035366467935863000898408"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-81507-fa189480",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espressif/esp-idf/commit/14c99559b4337cabcf0f09c21d16b93c4cd7a6fe",
        "target": {
            "file": "components/bt/host/bluedroid/stack/l2cap/l2c_utils.c"
        }
    }
]
vanir_signatures_modified 
"2026-10-28T11:18:05Z"