CVE-2024-45064 Memory corruption in X-CUBE-AZRT-H7RS
A buffer overflow in STMicroelectronics X-CUBE-AZRTOS allows remote attackers to execute arbitrary code via crafted network packets.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-45064?
CVE-2024-45064 is a high-severity memory corruption vulnerability in STMicroelectronics X-CUBE-AZRT-H7RS, published on 2 Apr 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A buffer overflow vulnerability exists in the FileX Internal RAM interface functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted set of network packets can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability.
Weakness: CWE-119
Which versions are affected by CVE-2024-45064?
It affects 10 products.
Products include St X-Cube-Azrt-H7rs, St X-Cube-Azrtos-F4, St X-Cube-Azrtos-F7, St X-Cube-Azrtos-G0, St X-Cube-Azrtos-G4, St X-Cube-Azrtos-H7 and 4 more.
How do I fix CVE-2024-45064?
No fix has been published for CVE-2024-45064 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-45064 being exploited?
There is no known exploitation of CVE-2024-45064 in the wild and no public exploit code.
Other vulnerabilities in STMicroelectronics X-CUBE-AZRT-H7RS
Sources
Also known as GHSA-h8hc-8pw6-mf3x.