Is CVE-2026-113782 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-113782 being exploited in the wild.

How severe is CVE-2026-113782?

High severity, with a CVSS score of 7.1, published 4 November 2026.

Which products and versions are affected?

Espressif ESP-IDF 5.2.0 to 5.2.7, 5.3.0 to 5.3.5, 5.4.0 to 5.4.4, 5.5.0 to 5.5.4, 6.0.0 to 6.0.2.

Is there a fix for CVE-2026-113782?

Yes: fixed in ESP-IDF 5.2.8, 5.3.6, 5.4.5, 5.5.5, 6.0.3. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-113782 attacked?

It is attacked from the adjacent network, in a software library.

Am I affected by CVE-2026-113782?

Check whether you run Espressif ESP-IDF at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-113782: ESP-IDF OpenThread Border Router buffer overflow in Neighbor Discovery

CVE-2026-113782 · Severity: high · CVSS 7.1 · Published 2026-11-04

ESP-IDF is a development framework for IoT devices based on Espressif chipsets. When the OpenThread Border Router feature is enabled, the framework is vulnerable to a stack-based buffer overflow in the handling of ICMPv6 Router Advertisement packets. An attacker on the same network link can trigger this vulnerability to crash the device, reboot it, or potentially execute code by corrupting adjacent stack memory.

Technologies: Espressif ESP-IDF. Vendors: Espressif.

Quick answers

Is CVE-2026-113782 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-113782 being exploited in the wild.
How severe is CVE-2026-113782?: High severity, with a CVSS score of 7.1, published 4 November 2026.
Which products and versions are affected?: Espressif ESP-IDF 5.2.0 to 5.2.7, 5.3.0 to 5.3.5, 5.4.0 to 5.4.4, 5.5.0 to 5.5.4, 6.0.0 to 6.0.2.
Is there a fix for CVE-2026-113782?: Yes: fixed in ESP-IDF 5.2.8, 5.3.6, 5.4.5, 5.5.5, 6.0.3. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-113782 attacked?: It is attacked from the adjacent network, in a software library.
Am I affected by CVE-2026-113782?: Check whether you run Espressif ESP-IDF at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: ESP-IDF 5.2.8, 5.3.6, 5.4.5, 5.5.5, 6.0.3

Technical details

The OpenThread Border Router Neighbor Discovery packet handler in ESP-IDF incorrectly trusts an attacker-controlled ICMPv6 option length field, leading to an out-of-bounds write into a fixed-size stack buffer. Exploitation requires network-adjacent access and no authentication. Devices are only affected when CONFIG_OPENTHREAD_BORDER_ROUTER=y is enabled; Thread end devices and RCP firmware without this feature are unaffected.

Affected products

Espressif ESP-IDF 5.2.0 to 5.2.7, 5.3.0 to 5.3.5, 5.4.0 to 5.4.4, 5.5.0 to 5.5.4, 6.0.0 to 6.0.2

Timeline

2026-11-04: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.