CVE-2021-42553

CriticalCVSS 9.8/10Last modified Oct 8, 2026

Description

A buffer overflow vulnerability in stm32_mw_usb_host of STMicroelectronics in versions before 3.5.1 allows an attacker to execute arbitrary code when the descriptor contains more endpoints than USBH_MAX_NUM_ENDPOINTS. The library is typically integrated when using a RTOS such as FreeRTOS on STM32 MCUs.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
STMicroelectronics STM32Cube	STM32 USB Host Library	>= all, < 3.5.1

References

https://github.com/STMicroelectronics/stm32_mw_usb_hostProduct
https://github.com/STMicroelectronics/stm32_mw_usb_host/pull/4Patch, Third Party Advisory
https://github.com/STMicroelectronics/stm32_mw_usb_hostProduct
https://github.com/STMicroelectronics/stm32_mw_usb_host/pull/4Patch, Third Party Advisory

Timeline

Published: Oct 21, 2022
Last modified: Oct 8, 2026
NVD status: Analyzed

Related CVEs from 2021

CVE-2021-425548.2An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel CVE-2021-425557.5Pexip Infinity before 26.2 allows temporary remote Denial of Service (abort) because of missing call-setup input validation.CVE-2021-425565.5Rasa X before 0.42.4 allows Directory Traversal during archive extraction. In the functionality that allows a user to load a trained model a CVE-2021-425577.5In Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users credentials.CVE-2021-425586.1An issue was discovered in CALDERA 2.8.1. It contains multiple reflected, stored, and self XSS vulnerabilities that may be exploited by auth CVE-2021-425598.8An issue was discovered in CALDERA 2.8.1. It contains multiple startup "requirements" that execute commands when starting the server. Becaus CVE-2021-42566.1A vulnerability was found in ctrlo lenio. It has been classified as problematic. This affects an unknown part of the file views/index.tt. Th CVE-2021-425608.8An issue was discovered in CALDERA 2.9.0. The Debrief plugin receives base64 encoded "SVG" parameters when generating a PDF document. These CVE-2021-425618.8An issue was discovered in CALDERA 2.8.1. When activated, the Human plugin passes the unsanitized name parameter to a python "os.system" fun CVE-2021-425628.1An issue was discovered in CALDERA 2.8.1. It does not properly segregate user privileges, resulting in non-admin users having access to read CVE-2021-425637.8There is an Unquoted Service Path in NI Service Locator (nisvcloc.exe) in versions prior to 18.0 on Windows. This may allow an authorized lo CVE-2021-425645.4An open redirect through HTML injection in confidential messages in Cryptshare before 5.1.0 allows remote attackers (with permission to prov