CVE-2026-10663

In Zephyr's experimental USB host stack CONFIGUSBHOSTSTACK, usbhdevicedisconnect subsys/usb/host/usbhdevice.c freed the root usbdevice slab object without clearing the cached pointer ctx-root. The bus removal handler devremovedhandler subsys/usb/host/usbhcore.c decides what to tear down solely fr...

CVE-2021-34260

A buffer overflow vulnerability in the USBHParseInterfaceDesc function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code...

CVE-2021-34267

CVE-2021-34267 affects STMicroelectronics STM32Cube Middleware ≤ v1.8.0, with a vulnerability in the USBH_MSC_InterfaceInit() function that can cause a denial of service when the system communicates with the connected endpoint. The connected documents confirm the affected component is STM32Cube M...