Browse CVEs

HIGH 7.5 CVE-2024-50596 An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially craf… X Cube Azrt H7rs No fix yet Fix from $1,9502025-04-02 HIGH 7.5 CVE-2024-50597 An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially craf… X Cube Azrt H7rs No fix yet Fix from $1,9502025-04-02 CRITICAL 9.8 CVE-2024-45064 A buffer overflow vulnerability exists in the FileX Internal RAM interface functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially cr… X Cube Azrt H7rs No fix yet Fix from $2,3002025-04-02 HIGH 7.5 CVE-2024-50384 A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially cr… X Cube Azrt H7rs No fix yet Fix from $1,9502025-04-02 HIGH 7.5 CVE-2024-50385 A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially cr… X Cube Azrt H7rs No fix yet Fix from $1,9502025-04-02 HIGH 7.5 CVE-2024-50594 An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially craf… X Cube Azrt H7rs No fix yet Fix from $1,9502025-04-02 HIGH 7.5 CVE-2024-50595 An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially craf… X Cube Azrt H7rs No fix yet Fix from $1,9502025-04-02 HIGH 7.5 CVE-2023-50096 STMicroelectronics STSAFE-A1xx middleware before 3.3.7 allows MCU code execution if an adversary has the ability to read from and write to the I2C bu… X Cube Safea1 No fix yet Fix from $1,9502024-01-01 MEDIUM 6.2 CVE-2021-43392 STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to obtain information on cryptographic secrets. This is associ… J Safe3 Firmware Mitigation only Fix from $1,6002022-03-04 MEDIUM 6.2 CVE-2021-43393 STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to abuse signature verification. This is associated with the E… Stsafe J Firmware Mitigation only Fix from $1,6002022-03-04 MEDIUM 5.9 CVE-2020-20949 Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube (UM1924). The vulner… Stm32cubef0 Mitigation only Fix from $1,6002021-01-20 HIGH 7.5 CVE-2020-8004 STMicroelectronics STM32F1 devices have Incorrect Access Control. Stm32f1 Firmware No fix yet Fix from $1,9502020-04-06 MEDIUM 5.9 CVE-2019-16863 STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the ECDSA private key via a side-channel timing attack beca… St33tphf2espi Firmware Mitigation only Fix from $1,6002019-11-14 MEDIUM 6.6 CVE-2019-14238 On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated with a debug pr… Stm32l0 Firmware No fix yet Fix from $1,6002019-09-24 CRITICAL 9.8 CVE-2019-14236 On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP p… Stm32l0 Firmware No fix yet Fix from $2,3002019-09-12 MEDIUM 6.4 CVE-2003-0392 Directory traversal vulnerability in ST FTP Service 3.0 allows remote attackers to list arbitrary directories via a CD command with a DoS drive lette… Ftp Service Mitigation only Fix from $1,6002003-07-02