Buffer overflow

2024-01-0118:15:00

PRIOn knowledge base

www.prio-n.com

stmicroelectronics

buffer overflow

vulnerability

middleware

stsafe-a1xx

x-cube-safea1

i2c bus

code execution

nvd

sample application

software package

8.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.2%

JSON

STMicroelectronics STSAFE-A1xx middleware before 3.3.7 allows MCU code execution if an adversary has the ability to read from and write to the I2C bus. This is caused by an StSafeA_ReceiveBytes buffer overflow in the X-CUBE-SAFEA1 Software Package for STSAFE-A sample applications (1.2.0), and thus can affect user-written code that was derived from a published sample application.

CPENameOperatorVersion
x-cube-safea1eq1.2.0

CPE	Name	Operator	Version
	x-cube-safea1	eq	1.2.0

References

github.com/elttam/publications/blob/master/writeups/CVE-2023-50096.md