The Espressif Internet of Things Development Framework (esp-idf) contains a stack-based buffer overflow vulnerability (CWE-121, CWE-787) in the jpeg_parse_dqt_marker() function located in components/esp_driver_jpeg/jpeg_parse_marker.c. The vulnerability arises because the DQT marker Tq nibble, which is attacker-controlled, is used as an index into the qt_tbl array without validating that it falls within the valid range 0 to 3. This out-of-bounds write can corrupt stack memory and reliably trigger a denial of service. Affected versions include 5.3.5, 5.4.4, 5.5.4, and 6.0.1. The issue is fixed in version 6.0.2 and expected to be fixed in 5.3.6, 5.4.5, and 5.5.5.

Successful exploitation of this vulnerability allows an attacker to cause a denial of service by corrupting stack memory through malformed JPEG input. There is no indication of confidentiality or integrity impact. The CVSS 3.1 base score is 7.5 (high), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability.

A fix is available in esp-idf version 6.0.2. Fixes are also expected in versions 5.3.6, 5.4.5, and 5.5.5. Users should upgrade to these fixed versions once available to remediate the vulnerability. Patch status is not yet confirmed for the 5.x branches, so check the vendor advisory for current remediation guidance.