A buffer overflow vulnerability has been identified in schreibfaul1 ESP32-audioI2S version 3.4.5, specifically within the UnpackFrameHeader() function. The vulnerability arises because multiple attacker-controlled index parameters are used to access static and heap table arrays without proper range validation or boundary checks. Invalid index values can lead to out-of-bounds memory writes and heap buffer overflow conditions. This type of vulnerability could potentially allow an attacker to execute arbitrary code or cause a denial of service on affected ESP32 devices. The issue is documented in the mp3_decoder.cpp source file of the library. ESP32-audioI2S is a widely used audio library for ESP32 microcontrollers, making this vulnerability relevant to IoT and embedded systems. The vulnerability has been assigned CVE-2026-51244 and is tracked on the NVD. No patch version has been explicitly mentioned in the article.