CVE-2021-42553
CVE-2021-42553 · STM32 USB Host Library Buffer Overflow
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A buffer overflow vulnerability in stm32_mw_usb_host of STMicroelectronics in versions before 3.5.1 allows an attacker to execute arbitrary code when the descriptor contains more endpoints than USBH_MAX_NUM_ENDPOINTS. The library is typically integrated when using a RTOS such as FreeRTOS on STM32 MCUs.
CVSS 6.8 · Medium · EPSS 1.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
stm32 usb host library
- Versions
- ≥ all, < 3.5.1: Affected (custom)
Update to 3.5.1
micropython Ubuntu:Pro:20.04:LTS
- Versions
- 1.12-1
- Affected ranges
- ECOSYSTEM: < 1.12-1ubuntu0.1~esm1
Update to 1.12-1ubuntu0.1~esm1
micropython Ubuntu:Pro:22.04:LTS
- Versions
- 1.17+ds-1ubuntu1
- 1.17+ds-1.1
- 1.17+ds-1.1ubuntu2
- Affected ranges
- ECOSYSTEM: < 1.17+ds-1.1ubuntu2+esm1
Update to 1.17+ds-1.1ubuntu2+esm1
micropython Ubuntu:Pro:24.04:LTS
- Versions
- 1.19.1+ds-1
- 1.22.1+ds-1
- 1.22.1+ds-1build1
- 1.22.1+ds-1build2
- Affected ranges
- ECOSYSTEM: < 1.22.1+ds-1ubuntu0.24.04.1~esm1
Update to 1.22.1+ds-1ubuntu0.24.04.1~esm1
micropython Ubuntu:25.10
- Versions
- 1.24.1+ds-1
- 1.25.0+ds-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
micropython Ubuntu:26.10
- Versions
- 1.26.1+ds-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
micropython Ubuntu:26.04:LTS
- Versions
- 1.25.0+ds-1
- 1.26.1+ds-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published