Skip to content
Brand AI

Espressif Systems

Controversies

Controversies tied to this brand in public sources. A listing is not a finding of fault.

Back to profile1 entries

  1. 2025

    ESP32 found to contain undocumented Bluetooth debugging commands, sparking 'backdoor' controversy

    Spanish security firm Tarlogic disclosed that ESP32 chips, used in more than 1 billion devices worldwide, contain 29 undocumented Bluetooth HCI commands that can be used for memory read/write, MAC address spoofing and other purposes; some media called this a "backdoor," and it was registered as CVE-2025-27840. Espressif clarified that it is not a backdoor, that the commands cannot be triggered remotely via Bluetooth or the network, and that the relevant interfaces have been disabled in new versions of ESP-IDF. The security of the IoT chip supply chain drew attention.

    Source