Vendor
STMicroelectronics STM32Cube
29 known vulnerabilities in products by STMicroelectronics STM32Cube, 0 of them actively exploited (CISA KEV).
Key figures
29
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-14236 | STMicroelectronics STM32F4 Firmware: security vulnerability | 9.8 | |
| High | CVE-2020-8004 | STMicroelectronics STM32Cube Stm32f1 Firmware: Improper Access Control | 7.5 | |
| Medium | CVE-2019-16863 | ST ST33TPHF2ESPI Firmware: security vulnerability | 5.9 | |
| Critical | CVE-2024-45064 | STMicroelectronics X-CUBE-AZRTOS-WL: Improper Restriction of Operations within the Bounds of a Memory Buffer | 8.5 | |
| Critical | CVE-2021-42553 | STM32 USB Host Library Buffer Overflow | 6.8 | |
| High | CVE-2024-50385 | STMicroelectronics X-CUBE-AZRTOS-F7: Incomplete Cleanup | 6.5 | |
| High | CVE-2024-50384 | STMicroelectronics X-CUBE-AZRTOS-F7: Incomplete Cleanup | 6.5 | |
| Medium | CVE-2019-19192 | STMicroelectronics STM32Cube Bluenrg-2: Deadlock | 6.5 | |
| High | CVE-2023-50096 | STMicroelectronics STM32Cube X-cube-safea1: Buffer Overflow | 7.5 | |
| Medium | CVE-2020-20949 | IETF Public Key Cryptography Standards \#1: Information Disclosure | 5.9 | |
| High | CVE-2024-50594 | STMicroelectronics X-CUBE-AZRTOS-F7: Integer Underflow (Wrap or Wraparound) | 4.3 | |
| High | CVE-2024-50597 | STMicroelectronics X-CUBE-AZRTOS-F7: Integer Underflow (Wrap or Wraparound) | 4.3 | |
| High | CVE-2024-50596 | STMicroelectronics X-CUBE-AZRTOS-F7: Integer Underflow (Wrap or Wraparound) | 4.3 | |
| High | CVE-2024-50595 | STMicroelectronics X-CUBE-AZRTOS-F7: Integer Underflow (Wrap or Wraparound) | 4.3 | |
| Medium | CVE-2021-34262 | Stm32cube Middleware: Buffer Overflow | 6.8 | |
| Medium | CVE-2021-34260 | Stm32cube Middleware: Buffer Overflow | 6.8 | |
| Medium | CVE-2021-34259 | Stm32cube Middleware: Buffer Overflow | 6.8 | |
| Medium | CVE-2020-13466 | STMicroelectronics STM32Cube Stm32f103 Firmware: Code Execution | 6.8 | |
| Medium | CVE-2019-14238 | STMicroelectronics STM32F4 Firmware: security vulnerability | 6.6 | |
| Not rated | CVE-2003-0392 | STMicroelectronics STM32Cube FTP Service: Path Traversal | — | |
| High | CVE-2020-27212 | STMicroelectronics STM32Cube Stm32cubel4 Firmware: Improper Access Control | 7.0 | |
| Medium | CVE-2023-36629 | STMicroelectronics STM32Cube St54-android-packages-apps-nfc: Out-of-Bounds Read | 5.5 | |
| Medium | CVE-2021-29414 | STMicroelectronics STM32Cube Stm32cubel4 Firmware: security vulnerability | 6.1 | |
| Medium | CVE-2017-18347 | STMicroelectronics STM32F030C6 Firmware: Race Condition | 4.6 | |
| Medium | CVE-2021-43392 | STMicroelectronics STM32Cube J-safe3 Firmware: security vulnerability | 6.2 |
Products
| X-cube-azrt-h7rs | 7 | 0 |
| X-cube-azrtos-f4 | 7 | 0 |
| X-cube-azrtos-f7 | 7 | 0 |
| X-cube-azrtos-g0 | 7 | 0 |
| X-cube-azrtos-g4 | 7 | 0 |
| X-cube-azrtos-h7 | 7 | 0 |
| X-cube-azrtos-l4 | 7 | 0 |
| X-cube-azrtos-l5 | 7 | 0 |
| X-cube-azrtos-wb | 7 | 0 |
| X-cube-azrtos-wl | 7 | 0 |
| Stm32cube Middleware | 6 | 0 |