CVE-2021-34260

2021-07-2220:15:08

Google

osv.dev

buffer overflow

usbh_parseinterfacedesc

arbitrary code

stm32cube middleware

vulnerability

stmicroelectronics

AI Score

Confidence

High

EPSS

0.001

Percentile

42.1%

JSON

A buffer overflow vulnerability in the USBH_ParseInterfaceDesc() function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code.

References

github.com/STMicroelectronics/STM32CubeH7/issues/83