Vulnerabilities > ST > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-10-21 CVE-2021-42553 Classic Buffer Overflow vulnerability in ST Stm32 MW USB Host
A buffer overflow vulnerability in stm32_mw_usb_host of STMicroelectronics in versions before 3.5.1 allows an attacker to execute arbitrary code when the descriptor contains more endpoints than USBH_MAX_NUM_ENDPOINTS.
network
low complexity
st CWE-120
critical
 9.8
9.8
2019-09-12 CVE-2019-14236 Incorrect Authorization vulnerability in ST products
On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated by observing CPU registers and the effect of code/instruction execution.
network
low complexity
st CWE-863
critical
 9.8
9.8