PatchTheCVEst vulnerabilities
Recent CVEs affecting st products. 7 tracked.
st has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-04-02. Highest priority: CVE-2024-45064 (score 51/100).
- CVE-2024-50597 MEDIUM 4.3 DOWNGRADE DOWNGRADE An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X
- CVE-2024-50596 MEDIUM 4.3 DOWNGRADE DOWNGRADE An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X
- CVE-2024-50595 MEDIUM 4.3 DOWNGRADE DOWNGRADE An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X
- CVE-2024-50594 MEDIUM 4.3 DOWNGRADE DOWNGRADE An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X
- CVE-2024-50385 MEDIUM 6.5 DOWNGRADE DOWNGRADE A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics
- CVE-2024-50384 MEDIUM 6.5 DOWNGRADE DOWNGRADE A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics
- CVE-2024-45064 HIGH 8.5 DOWNGRADE DOWNGRADE A buffer overflow vulnerability exists in the FileX Internal RAM interface functionality of STMicroelectronics
FAQ
How do I fix st vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is st being exploited right now?
None of the tracked st CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which st CVE should I patch first?
CVE-2024-45064 currently ranks highest (51/100): A buffer overflow vulnerability exists in the FileX Internal RAM interface functionality of STMicroelectronics.