Skip to content

St vulnerabilities

Newest

st x-cube-azrtos-wl, x-cube-azrt-h7rs, x-cube-azrtos-f4 +7 more +9 more A buffer overflow vulnerability exists in the FileX Internal RAM interface functionality of... CVE-2024-45064 8.5 HighApril 2, 2025
st x-cube-azrtos-f7, x-cube-azrtos-wl, x-cube-azrt-h7rs +7 more +9 more A denial of service vulnerability exists in the NetX Component HTTP server functionality of... CVE-2024-50385 6.5 MediumApril 2, 2025
st x-cube-azrtos-f7, x-cube-azrtos-wl, x-cube-azrt-h7rs +7 more +9 more A denial of service vulnerability exists in the NetX Component HTTP server functionality of... CVE-2024-50384 6.5 MediumApril 2, 2025
st x-cube-azrtos-f7, x-cube-azrtos-wl, x-cube-azrt-h7rs +7 more +9 more An integer underflow vulnerability exists in the HTTP server PUT request functionality of... CVE-2024-50595 4.3 MediumApril 2, 2025
st x-cube-azrtos-f7, x-cube-azrtos-wl, x-cube-azrt-h7rs +7 more +9 more An integer underflow vulnerability exists in the HTTP server PUT request functionality of... CVE-2024-50594 4.3 MediumApril 2, 2025
st x-cube-azrtos-f7, x-cube-azrtos-wl, x-cube-azrt-h7rs +7 more +9 more An integer underflow vulnerability exists in the HTTP server PUT request functionality of... CVE-2024-50597 4.3 MediumApril 2, 2025
st x-cube-azrtos-f7, x-cube-azrtos-wl, x-cube-azrt-h7rs +7 more +9 more An integer underflow vulnerability exists in the HTTP server PUT request functionality of... CVE-2024-50596 4.3 MediumApril 2, 2025
st st54-android-packages-apps-nfc The ST ST54-android-packages-apps-Nfc package before 130-20230215-23W07p0 for Android has an out... CVE-2023-36629 5.5 MediumJanuary 9, 2024
st x-cube-safea1 STMicroelectronics STSAFE-A1xx middleware before 3.3.7 allows MCU code execution if an adversary... CVE-2023-50096 7.5 HighJanuary 1, 2024
stmicroelectronics stm32cube stm32 usb host library, st stm32 mw usb host +1 more STM32 USB Host Library Buffer Overflow CVE-2021-42553 Fix available 6.8 MediumOctober 21, 2022
st j-safe3 firmware, stsafe-j firmware +1 more STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to obtain... CVE-2021-43392 6.2 MediumMarch 4, 2022
st j-safe3 firmware, stsafe-j firmware +1 more STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to abuse... CVE-2021-43393 6.2 MediumMarch 4, 2022
st stm32cube middleware An issue in the USBH_ParseDevDesc() function of STMicroelectronics STM32Cube Middleware v1.8.0... CVE-2021-34268 4.6 MediumJuly 22, 2021
st stm32cube middleware An in the USBH_MSC_InterfaceInit() function of STMicroelectronics STM32Cube Middleware v1.8.0 and... CVE-2021-34267 4.6 MediumJuly 22, 2021
st stm32cube middleware A buffer overflow vulnerability in the USBH_ParseEPDesc() function of STMicroelectronics... CVE-2021-34262 6.8 MediumJuly 22, 2021
st stm32cube middleware An issue in USBH_ParseCfgDesc() of STMicroelectronics STM32Cube Middleware v1.8.0 and below... CVE-2021-34261 4.6 MediumJuly 22, 2021
st stm32cube middleware A buffer overflow vulnerability in the USBH_ParseInterfaceDesc() function of STMicroelectronics... CVE-2021-34260 6.8 MediumJuly 22, 2021
st stm32cube middleware A buffer overflow vulnerability in the USBH_ParseCfgDesc() function of STMicroelectronics... CVE-2021-34259 6.8 MediumJuly 22, 2021
st stm32cubel4 firmware STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash... CVE-2020-27212 7.0 HighMay 21, 2021
st stm32cubel4 firmware STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control. CVE-2021-29414 6.1 MediumMay 21, 2021
ietf public key cryptography standards \#1, st stm32cubef0, stm32cubef1 +19 more +21 more Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in STM32 cryptographic firmware library... CVE-2020-20949 5.9 MediumJanuary 20, 2021
st stm32f103 firmware STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute... CVE-2020-13466 6.8 MediumAugust 31, 2020
st stm32f1 firmware STMicroelectronics STM32F1 devices have Incorrect Access Control. CVE-2020-8004 Public exploit 7.5 HighApril 6, 2020
st bluenrg-2, wb55 +1 more The Bluetooth Low Energy implementation on STMicroelectronics BLE Stack through 1.3.1 for... CVE-2019-19192 6.5 MediumFebruary 12, 2020
st st33tphf20i2c firmware, st33tphf20spi firmware, st33tphf2ei2c firmware +1 more +3 more STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the... CVE-2019-16863 5.9 MediumNovember 14, 2019
st stm32f4 firmware, stm32f7 firmware, stm32h7 firmware +3 more +5 more On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection (PCROP) (a software... CVE-2019-14238 6.6 MediumSeptember 24, 2019
st stm32f4 firmware, stm32f7 firmware, stm32h7 firmware +3 more +5 more On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices,... CVE-2019-14236 9.8 CriticalSeptember 12, 2019
st stm32f030c6 firmware, stm32f030c8 firmware, stm32f030cc firmware +69 more +71 more Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows... CVE-2017-18347 4.6 MediumSeptember 12, 2018
st ftp service Directory traversal vulnerability in ST FTP Service 3.0 allows remote attackers to list arbitrary... CVE-2003-0392 6.4 MediumJune 10, 2003