STM32MP2 silicon bug discovered in custom firmware project
Original title: Playing with the STM32MP2
Author finds security-impacting silicon bug in STM32MP2 while developing custom firmware without vendor SDKs.
The author of a blog post on playing with the STM32MP2 microcontroller discovered a silicon bug with security impacts during a project to run custom firmware on the device. The bug was kept quiet until ST could review and release an advisory. The post details efforts to build the firmware using only upstream tools and on-die SRAM.
Unconfirmed: ST has not yet released the advisory or confirmed details of the bug
- Silicon bug in STM32MP2 with security impacts found
- Project runs custom firmware on STM32MP257F-EV1 board
- Uses upstream aarch64 toolchain and on-die SRAM only
- ST to review and put out advisory
| Product | Affected |
|---|---|
| STMicroelectronics STM32MP2 | — |
- Vendors
- STMicroelectronics
- Products
- STM32MP2
From the original article
16 min read at serd.esFirst off, an apology - this post is long overdue. I started writing it back even before the TCXO post, I think some time in December 2025.
By dverlaeckt80 · serd.es
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.