CVE-2024-50597

An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects the NetX Duo Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\http\nxd_http_server.c

• CWE-191

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-2103Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2103

Published

Apr 2, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-50591An attacker with local access the to medical office computer…7.8
• CVE-2024-50592An attacker with local access the to medical office computer…7
• CVE-2024-50593An attacker with local access to the medical office computer…7.8
• CVE-2024-50594An integer underflow vulnerability exists in the HTTP server…7.5
• CVE-2024-50595An integer underflow vulnerability exists in the HTTP server…7.5
• CVE-2024-50596An integer underflow vulnerability exists in the HTTP server…7.5
• CVE-2024-50599A reflected Cross-Site Scripting (XSS) vulnerability has bee…6.1
• CVE-2024-5060The LottieFiles – JSON Based Animation Lottie & Bodymovin fo…5.4
• CVE-2024-50600An issue was discovered in Samsung Mobile Processor and Wear…7.5
• CVE-2024-50601Persistent and reflected XSS vulnerabilities in the themeMod…6.1
• CVE-2024-50602An issue was discovered in libexpat before 2.6.4. There is a…5.9
• CVE-2024-50603An issue was discovered in Aviatrix Controller before 7.1.41…9.8