arduino-esp32 vulnerabilities

In versions prior to 3.3.8, the Digest authentication implementation in arduino-esp32 computed the authentication hash using the URI field from the client's Authorization header, without verifying that it matched the actual requested URI. This allows an attacker to authenticate requests to a different protected URI, bypassing access control.

In versions prior to 3.3.8, the arduino-esp32 library has a memory corruption issue in the NBNS packet handling. When NetBIOS is enabled, the device listens on UDP port 137 and processes untrusted NBNS requests from the local network.

In versions prior to 3.3.8, the WebServer multipart form parser in arduino-esp32 allocates a Variable Length Array (VLA) on the stack whose size is derived from an attacker-controlled HTTP header field. Sending a boundary string longer than ~8000 characters overflows the stack and may lead to remote code execution.