CVE-2021-34268: Medium severity st stm32cube middleware vulnerability
An issue in the USBHParseDevDesc() function of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial of service (DOS) via a malformed USB device packet.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue in STMicroelectronics STM32Cube Middleware?
The vulnerability ID for this issue in STMicroelectronics STM32Cube Middleware is CVE-2021-34268.
What is the affected version of STMicroelectronics STM32Cube Middleware?
The affected version of STMicroelectronics STM32Cube Middleware is v1.8.0 and below.
What is the severity rating of CVE-2021-34268?
The severity rating of CVE-2021-34268 is medium with a CVSS score of 4.6.
What is the impact of this vulnerability?
This vulnerability in STMicroelectronics STM32Cube Middleware can cause a denial of service (DOS) via a malformed USB device packet.
Is the STMicroelectronics STM32h7b3 affected by this vulnerability?
No, the STMicroelectronics STM32h7b3 is not affected by this vulnerability.
Where can I find more information about this vulnerability?
More information about this vulnerability can be found at: https://github.com/STMicroelectronics/STM32CubeH7/issues/75