St STM32L4 Firmware vulnerabilities

2 CVEs affecting St STM32L4 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-14238, published 2019-09-24.

More from St.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-14236, published 2019-09-12. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated by observing CPU…
• CVE-2019-14238, published 2019-09-24. Medium severity, CVSS 6.6. EPSS: 0.4% chance of exploitation in the next 30 days. On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated with a debug probe via the Instruction Tightly Coupled Memory…