ST vulnerabilities | LiveThreat CVE Feed

CVE	Product	CVSS	EPSS	Published	Summary
CVE-2024-45064	XC X-cube-azrtos-h7 ST	9.8	1%	Apr 2	A buffer overflow vulnerability exists in the FileX Internal RAM interface functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0
CVE-2024-50385	XC X-cube-azrtos-g0 ST	7.5	1%	Apr 2	A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0
CVE-2024-50384	XC X-cube-azrtos-h7 ST	7.5	1%	Apr 2	A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0
CVE-2024-50595	XC X-cube-azrtos-f4 ST	7.5	1%	Apr 2	An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0
CVE-2024-50594	XC X-cube-azrtos-l4 ST	7.5	1%	Apr 2	An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0
CVE-2024-50597	XC X-cube-azrtos-h7 ST	7.5	1%	Apr 2	An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0
CVE-2024-50596	XC X-cube-azrtos-l4 ST	7.5	1%	Apr 2	An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0
CVE-2023-36629	ST St54-android-packages-apps-nfc ST	5.5	0%	Jan 9	The ST ST54-android-packages-apps-Nfc package before 130-20230215-23W07p0 for Android has an out-of-bounds read
CVE-2023-50096	XC X-cube-safea1 ST	7.5	1%	Jan 1	STMicroelectronics STSAFE-A1xx middleware before 3.3.7 allows MCU code execution if an adversary has the ability to read from and write to the I2C bus
CVE-2021-42553	SM Stm32 MW Usb Host ST	9.8	1%	Oct 21	STM32 USB Host Library Buffer Overflow
CVE-2021-43393	SF Stsafe-j Firmware ST	6.2	0%	Mar 4	STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to abuse signature verification
CVE-2021-43392	JF J-safe3 Firmware ST	6.2	0%	Mar 4	STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to obtain information on cryptographic secrets
CVE-2021-34268	SM Stm32cube Middleware ST	4.6	0%	Jul 22	An issue in the USBH_ParseDevDesc() function of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial of service (DOS) via a malformed USB device packet
CVE-2021-34267	SM Stm32cube Middleware ST	4.6	0%	Jul 22	An in the USBH_MSC_InterfaceInit() function of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial of service (DOS) when the system tries to communicate with…
CVE-2021-34262	SM Stm32cube Middleware ST	6.8	0%	Jul 22	A buffer overflow vulnerability in the USBH_ParseEPDesc() function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code
CVE-2021-34261	SM Stm32cube Middleware ST	4.6	0%	Jul 22	An issue in USBH_ParseCfgDesc() of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial of service due to the system hanging when trying to set a remote…
CVE-2021-34260	SM Stm32cube Middleware ST	6.8	0%	Jul 22	A buffer overflow vulnerability in the USBH_ParseInterfaceDesc() function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code
CVE-2021-34259	SM Stm32cube Middleware ST	6.8	0%	Jul 22	A buffer overflow vulnerability in the USBH_ParseCfgDesc() function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code
CVE-2021-29414	SF Stm32cubel4 Firmware ST	6.1	0%	May 21	STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control
CVE-2020-27212	SF Stm32cubel4 Firmware ST	7.0	0%	May 21	STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control
CVE-2020-20949	ST Stm32cubel4 ST	5.9	1%	Jan 20	Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube (UM1924)
CVE-2020-13466	SF Stm32f103 Firmware ST	6.8	0%	Aug 31	STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit…
CVE-2020-8004	SF Stm32f1 Firmware ST	7.5	3%	Apr 6	STMicroelectronics STM32F1 devices have Incorrect Access Control
CVE-2019-19192	WB Wb55 ST	6.5	1%	Feb 12	The Bluetooth Low Energy implementation on STMicroelectronics BLE Stack through 1.3.1 for STM32WB5x devices does not properly handle consecutive Attribute Protocol (ATT) requests…
CVE-2019-16863	SF St33tphf2espi Firmware ST	5.9	3%	Nov 14	STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the ECDSA private key via a side-channel timing attack because ECDSA scalar…
CVE-2019-14238	SF Stm32l0 Firmware ST	6.6	0%	Sep 24	On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated with a debug probe via the Instruction…
CVE-2019-14236	SF Stm32l0 Firmware ST	9.8	2%	Sep 12	On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be…
CVE-2017-18347	SF Stm32f071v8 Firmware ST	4.6	0%	Sep 12	Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special…
CVE-2003-0392	FS Ftp Service ST	–	1%	Jul 2	Directory traversal vulnerability in ST FTP Service 3.0 allows remote attackers to list arbitrary directories via a CD command with a DoS drive letter argument (e.g