CVE-2026-10663

In Zephyr's experimental USB host stack CONFIGUSBHOSTSTACK, usbhdevicedisconnect subsys/usb/host/usbhdevice.c freed the root usbdevice slab object without clearing the cached pointer ctx-root. The bus removal handler devremovedhandler subsys/usb/host/usbhcore.c decides what to tear down solely fr...

CVE-2021-34260

A buffer overflow vulnerability in the USBHParseInterfaceDesc function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code...

CVE-2021-34260

A buffer overflow vulnerability in the USBHParseInterfaceDesc function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code...

CVE-2021-34267

CVE-2021-34267 affects STMicroelectronics STM32Cube Middleware ≤ v1.8.0, with a vulnerability in the USBH_MSC_InterfaceInit() function that can cause a denial of service when the system communicates with the connected endpoint. The connected documents confirm the affected component is STM32Cube M...

PT-2021-20413

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: A buffer overflow vulnerability in the USBH ParseInterfaceDesc function allows attackers to execute arbitrary code. Recommendations: For versions 1.8.0 and below,...

PT-2021-20417

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: The issue is caused by a problem in the USBH ParseDevDesc function, which can lead to a denial of service DOS when a malformed USB device packet is received...

PT-2021-20412

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: A buffer overflow vulnerability in the USBH ParseCfgDesc function allows attackers to execute arbitrary code. Recommendations: For versions 1.8.0 and below, conside...

PT-2021-20416

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: The issue is caused by a problem in the USBH MSC InterfaceInit function, leading to a denial of service DOS when the system attempts to communicate with the connect...

PT-2021-20414

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: The issue is caused by a problem in the USBH ParseCfgDesc function, which leads to a denial of service due to the system hanging when trying to set a remote wake-up...

PT-2021-20415

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: A buffer overflow vulnerability in the USBH ParseEPDesc function allows attackers to execute arbitrary code. Recommendations: For versions 1.8.0 and below, consider...