st Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/st/ Sun, 26 Feb 2023 06:31:59 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png st Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/st/ 32 32 CVE-2019-19192 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19192/ Sun, 26 Feb 2023 06:31:59 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19192/ The Bluetooth Low Energy implementation on STMicroelectronics BLE Stack through 1.3.1 for STM32WB5x devices does not properly handle consecutive Attribute Protocol (ATT) requests on reception, allowing attackers in radio range to cause an event deadlock or crash via crafted packets.

The post CVE-2019-19192 appeared first on CVE Vulnerability.

]]> The Bluetooth Low Energy implementation on STMicroelectronics BLE Stack through 1.3.1 for STM32WB5x devices does not properly handle consecutive Attribute Protocol (ATT) requests on reception, allowing attackers in radio range to cause an event deadlock or crash via crafted packets.

The post CVE-2019-19192 appeared first on CVE Vulnerability.

]]> CVE-2019-16863 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-16863/ Sun, 26 Feb 2023 06:31:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-16863/ STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the ECDSA private key via a side-channel timing attack because ECDSA scalar multiplication is mishandled, aka TPM-FAIL.

The post CVE-2019-16863 appeared first on CVE Vulnerability.

]]> STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the ECDSA private key via a side-channel timing attack because ECDSA scalar multiplication is mishandled, aka TPM-FAIL.

The post CVE-2019-16863 appeared first on CVE Vulnerability.

]]> CVE-2019-14238 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-14238/ Sun, 26 Feb 2023 06:30:30 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-14238/ On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated with a debug probe via the Instruction Tightly Coupled Memory (ITCM) bus.

The post CVE-2019-14238 appeared first on CVE Vulnerability.

]]> On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated with a debug probe via the Instruction Tightly Coupled Memory (ITCM) bus.

The post CVE-2019-14238 appeared first on CVE Vulnerability.

]]> CVE-2019-14236 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-14236/ Sun, 26 Feb 2023 06:30:29 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-14236/ On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated by observing CPU registers and the effect of code/instruction execution.

The post CVE-2019-14236 appeared first on CVE Vulnerability.

]]> On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated by observing CPU registers and the effect of code/instruction execution.

The post CVE-2019-14236 appeared first on CVE Vulnerability.

]]>