CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-42553

A buffer overflow vulnerability in stm32_mw_usb_host of STMicroelectronics in versions before 3.5.1 allows an attacker to execute arbitrary code when the descriptor contains more endpoints than USBH_MAX_NUM_ENDPOINTS. The library is typically integrated when using a RTOS such as FreeRTOS on STM32 MCUs.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.013

EPSS Ranking 69.9%

CVSS Severity

CVSS v3 Score 6.8

References

Products affected by CVE-2021-42553

St » Stm32 Mw Usb Host » Version: N/A

cpe:2.3:a:st:stm32_mw_usb_host:-
St » Stm32 Mw Usb Host » Version: 3.3.3

cpe:2.3:a:st:stm32_mw_usb_host:3.3.3
St » Stm32 Mw Usb Host » Version: 3.3.4

cpe:2.3:a:st:stm32_mw_usb_host:3.3.4
St » Stm32 Mw Usb Host » Version: 3.3.5

cpe:2.3:a:st:stm32_mw_usb_host:3.3.5
St » Stm32 Mw Usb Host » Version: 3.4.0

cpe:2.3:a:st:stm32_mw_usb_host:3.4.0
St » Stm32 Mw Usb Host » Version: 3.4.1

cpe:2.3:a:st:stm32_mw_usb_host:3.4.1
St » Stm32 Mw Usb Host » Version: 3.5.0

cpe:2.3:a:st:stm32_mw_usb_host:3.5.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-42553

Products

Pricing

Contact Us