CVE-2025-68657
Espressif ESP-IDF USB Host HID (Human Interface Device) Driver allows access to HID devices. Prior to 1.1.0, calls to hid_host_device_close() can free the same usb_transfer_t twice. The USB event callback and user code share the hid_iface_t state without locking, so both can tear down a READY interface simultaneously, corrupting heap metadata inside the ESP USB host stack. This vulnerability is fixed in 1.1.0.
Published:Jan 12, 2026
Last Modified:Jan 22, 2026
EPS:Jan 12, 2026
EPSS Score:0.0002
CVSS Score:6.4
Affected Products
Vendor
Product
Action
Vendor
Espressif
Product
Esp-usb
Espressif
Esp-usb
Vendor
Espressif
Product
Usb Host Hid Driver
Espressif
Usb Host Hid Driver
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
