Kritik CVSS 9.8
CVE-2021-42553: Stm32 Mw Usb Host: arabellek taşması
Açıklama (NVD)
A buffer overflow vulnerability in stm32_mw_usb_host of STMicroelectronics in versions before 3.5.1 allows an attacker to execute arbitrary code when the descriptor contains more endpoints than USBH_MAX_NUM_ENDPOINTS. The library is typically integrated when using a RTOS such as FreeRTOS on STM32 MCUs.
Özet bilgiler
- Ürün
- St Stm32 Mw Usb Host
- CVSS v3.1
- 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %1,27 (yüzdelik 70)
- CWE
- CWE-120
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| st-stm32-mw-usb-host | — | — | 3.5.1 |