{"vulnerability": "CVE-2026-51252", "sightings": [{"uuid": "293177e9-69a2-4d92-a8b5-b6f9f7d3693e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51252", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrq4ipgtta2u", "content": "CVE-2026-51252\nA vulnerability in the schreibfaul1 ESP32-audioI2S MP3 decoder could allow an attacker to execute malicious code. This could happen if an attacker sends a specially crafted MP3 file to a system using this\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-28T19:12:06.431876Z"}, {"uuid": "80cd4488-a008-40ce-80cd-f977df690231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51252", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mrqmqkcihu2i", "content": "Critical CVE landed today in ESP32:\n\nCVE-2026-51252. schreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in the MP3Decoder::UnpackSFMPEG1 function due to missing input validation on attacker-controlled MP3 metadata.\n\nnvd.nist.gov/vuln/detail/CVE-2026-51252", "creation_timestamp": "2026-07-29T00:02:49.704977Z"}]}