Approved changes feed: RSS · Atom

cpe:2.3:a:st:stm32cube_middleware:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSt (53c12992-bb08-5830-87b5-2d1cf2314a51)
ProductStm32Cube Middleware (10fe96ea-305f-5f44-8d5a-40b496982d6a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/stmicroelectronics/stm32cubeh7 purl2cpe 2026-06-01 10:14:19.100712

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-34268 vulnerable 2026-06-08 05:32:12.976650 Details available
An issue in the USBH_ParseDevDesc() function of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial of service (DOS) via a malformed USB device packet.
Published: 2021-07-22T19:47:46.000Z
Updated: 2024-08-04T00:05:52.491Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34267 vulnerable 2026-06-08 05:32:12.976347 Details available
An in the USBH_MSC_InterfaceInit() function of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial of service (DOS) when the system tries to communicate with the connected endpoint.
Published: 2021-07-22T19:47:43.000Z
Updated: 2024-08-04T00:05:52.479Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34262 vulnerable 2026-06-08 05:32:12.975921 Details available
A buffer overflow vulnerability in the USBH_ParseEPDesc() function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code.
Published: 2021-07-22T19:40:37.000Z
Updated: 2024-08-04T00:05:52.405Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34261 vulnerable 2026-06-08 05:32:12.975611 Details available
An issue in USBH_ParseCfgDesc() of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial of service due to the system hanging when trying to set a remote wake-up feature.
Published: 2021-07-22T19:40:36.000Z
Updated: 2024-08-04T00:05:52.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34260 vulnerable 2026-06-08 05:32:12.975281 Details available
A buffer overflow vulnerability in the USBH_ParseInterfaceDesc() function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code.
Published: 2021-07-22T19:40:35.000Z
Updated: 2024-08-04T00:05:52.484Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34259 vulnerable 2026-06-08 05:32:12.974036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.