CVE-2020-20949Medium· 5.9▾ SunlitBleichenbacher's attack on PKCS #1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube (UM1924). The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciph…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 32.5 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 2.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.9%
0.9% → 0.9%
Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube (UM1924). The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the vulnerable library, resulting in remote information disclosure.
stm32cubef0stm32cubef1stm32cubef2stm32cubef3stm32cubef4stm32cubef7stm32cubeg0stm32cubeg4stm32cubeh7stm32cubeidestm32cubel0stm32cubel1stm32cubel4stm32cubel4+stm32cubel5stm32cubemonitorstm32cubemp1stm32cubemxstm32cubeprogrammerstm32cubewbstm32cubewlpublic_key_cryptography_standards_#1 = 1.5Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2020-20950Medium· 5.9Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in Microchip Libraries for Applications 2018-11-26 All up to 2018-11-26
CVE-2021-42553Medium· 6.8A buffer overflow vulnerability in stm32_mw_usb_host of STMicroelectronics in versions before 3.5.1 allows an attacker to execute arbitrary code when the descriptor contains more endpoints than USBH_MAX_NUM_ENDPOINTS
CVE-2026-118684Medium· 5.9MONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads
CVE-2026-108014Critical· 9.1eMudhra Compromised Certificate vulnerability impacts HCL Domino Server
CVE-2026-108015Critical· 9.1eMudhra Compromised Certificate vulnerability impacts HCL Notes Client
CVE-2026-101762Medium· 5.3mysql: mysql: Denial of Service via security encryption component (CVE-2026-101762)