CVE-2021-34268

An issue in the USBHParseDevDesc function of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial of service DOS via a malformed USB device packet...

CVE-2021-34259: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in the USBHParseCfgDesc function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code...

PT-2021-20415

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: A buffer overflow vulnerability in the USBH ParseEPDesc function allows attackers to execute arbitrary code. Recommendations: For versions 1.8.0 and below, consider...

PT-2021-20416

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: The issue is caused by a problem in the USBH MSC InterfaceInit function, leading to a denial of service DOS when the system attempts to communicate with the connect...

PT-2021-20414

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: The issue is caused by a problem in the USBH ParseCfgDesc function, which leads to a denial of service due to the system hanging when trying to set a remote wake-up...

PT-2021-20417

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: The issue is caused by a problem in the USBH ParseDevDesc function, which can lead to a denial of service DOS when a malformed USB device packet is received...

CVE-2021-34260: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in the USBHParseInterfaceDesc function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code...

CVE-2021-34267: Undefined Security Weakness

An in the USBHMSCInterfaceInit function of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial of service DOS when the system tries to communicate with the connected endpoint...

CVE-2021-34262: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in the USBHParseEPDesc function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code...

CVE-2021-34268: Undefined Security Weakness

An issue in the USBHParseDevDesc function of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial of service DOS via a malformed USB device packet...