looks like CVE-2025-27840 can’t be triggered remotely by Bluetooth, radio signals, or over the Internet, meaning they do not pose a risk of remote compromise of ESP32 devices