CVE-2021-34259

A buffer overflow vulnerability in the USBHParseCfgDesc function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code...

CVE-2021-34268: Undefined Security Weakness

An issue in the USBHParseDevDesc function of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial of service DOS via a malformed USB device packet...

CVE-2021-34267: Undefined Security Weakness

An in the USBHMSCInterfaceInit function of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial of service DOS when the system tries to communicate with the connected endpoint...

CVE-2021-34262: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in the USBHParseEPDesc function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code...

CVE-2021-34260: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in the USBHParseInterfaceDesc function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code...

STMicroelectronics STM32Cube Middleware 安全漏洞

The Stmicroelectronics STMicroelectronics STM32Cube is a microcontroller for embedded systems from STMicroelectronics Switzerland. A security vulnerability exists in the STMicroelectronics STM32Cube Middleware, which is a problem with the USBH ParseDevDesc function that results in a denial of...

PT-2021-20415

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: A buffer overflow vulnerability in the USBH ParseEPDesc function allows attackers to execute arbitrary code. Recommendations: For versions 1.8.0 and below, consider...

PT-2021-20417

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: The issue is caused by a problem in the USBH ParseDevDesc function, which can lead to a denial of service DOS when a malformed USB device packet is received...

PT-2021-20414

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: The issue is caused by a problem in the USBH ParseCfgDesc function, which leads to a denial of service due to the system hanging when trying to set a remote wake-up...

PT-2021-20416

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: The issue is caused by a problem in the USBH MSC InterfaceInit function, leading to a denial of service DOS when the system attempts to communicate with the connect...

CVE-2021-34259: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in the USBHParseCfgDesc function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code...

Unspecified Vulnerability in STMicroelectronics STM32L4

The STMicroelectronics STM32L4 is a series of ultra-low power microcontrollers from STMicroelectronics, an Italian and French company. A security vulnerability exists in STMicroelectronics STM32L4 devices, which arises from having incorrect physical access control. No details of the vulnerability...

CVE-2020-27212

STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection RDP can be degraded from RDP level 2 no access via debug interface to level 1 limited access via debug interface by injecting a fault during the boot phase...

CVE-2021-29414

STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control...

Design/Logic Flaw

STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection RDP can be degraded from RDP level 2 no access via debug interface to level 1 limited access via debug interface by injecting a fault during the boot phase...

Improper access control

STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control...

CVE-2020-27212

STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection RDP can be degraded from RDP level 2 no access via debug interface to level 1 limited access via debug interface by injecting a fault during the boot phase...

CVE-2021-29414

Technical details for CVE-2021-29414 are not provided in the supplied documents; no concrete vulnerable components, versions, or fixes are disclosed. Monitor official advisories for updates.

CVE-2021-29414

STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control...

CVE-2020-27212: Improper Neutralization of Special Elements in Output Used by a Downstream Component

STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection RDP can be degraded from RDP level 2 no access via debug interface to level 1 limited access via debug interface by injecting a fault during the boot phase...