CVE-2021-42553
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2021-42553
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-42553.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-42553
- Related
- Published
- 2022-10-21T10:15:12Z
- Modified
- 2025-05-07T22:50:43.404774Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A buffer overflow vulnerability in stm32mwusbhost of STMicroelectronics in versions before 3.5.1 allows an attacker to execute arbitrary code when the descriptor contains more endpoints than USBHMAXNUMENDPOINTS. The library is typically integrated when using a RTOS such as FreeRTOS on STM32 MCUs.
- References