STMicroelectronics vulnerabilities
We track 7 vulnerabilities in STMicroelectronics products across 10 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on April 2, 2025.
Latest STMicroelectronics vulnerabilities
- 7.5 High severity
X-CUBE-AZRT-H7RS: Integer Underflow (Wrap or Wraparound)
An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulne
- 7.5 High severity
X-CUBE-AZRT-H7RS: Integer Underflow (Wrap or Wraparound)
An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulne
- 7.5 High severity
X-CUBE-AZRT-H7RS: Integer Underflow (Wrap or Wraparound)
An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series of network requests can lead to denial of service. An attacker can send a sequence of malicious pack
- 7.5 High severity
X-CUBE-AZRT-H7RS: Integer Underflow (Wrap or Wraparound)
An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series of network requests can lead to denial of service. An attacker can send a sequence of malicious pack
- 7.5 High severity
X-CUBE-AZRT-H7RS: Incomplete Cleanup
A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vul
- 7.5 High severity
X-CUBE-AZRT-H7RS: Incomplete Cleanup
A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vul
- 9.8 Critical severity
X-CUBE-AZRT-H7RS: Improper Restriction of Operations within the Bounds of a Memory Buffer
A buffer overflow vulnerability exists in the FileX Internal RAM interface functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted set of network packets can lead to code execution. An attacker can send a sequence of requests to trigger