A buffer overflow vulnerability exists in the FileX Internal RAM interface functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted set of network packets can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability.
2025-04-02T14:15:43.157
2025-09-05T17:11:54.993
Analyzed
CVSSv3.1: 8.5 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | st | x-cube-azrt-h7rs | 1.0.0 | Yes |
| Application | st | x-cube-azrtos-f4 | 1.1.0 | Yes |
| Application | st | x-cube-azrtos-f7 | 1.1.0 | Yes |
| Application | st | x-cube-azrtos-g0 | 1.1.0 | Yes |
| Application | st | x-cube-azrtos-g4 | 2.0.0 | Yes |
| Application | st | x-cube-azrtos-h7 | 3.3.0 | Yes |
| Application | st | x-cube-azrtos-l4 | 2.0.0 | Yes |
| Application | st | x-cube-azrtos-l5 | 2.0.0 | Yes |
| Application | st | x-cube-azrtos-wb | 2.0.0 | Yes |
| Application | st | x-cube-azrtos-wl | 2.0.0 | Yes |