CVE-2026-4179CWE-835

CVE-2026-4179

Medium · published March 16, 2026

CVSS v3.1
6.1
EPSS
0%
Percentile
4.2
In the wild
Unconfirmed
What it is

Issues in stm32 USB device driver (drivers/usb/device/usb_dc_stm32.c) can lead to an infinite while loop.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00154 · 4.2th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2026-03-16T18:19Z
Affected products (1)
ProductVersionsFixed in
zephyrproject/zephyr≤ 4.3.0—
References (2)
https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-9xg7-g3q3-9prf · [email protected]https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-9xg7-g3q3-9prf · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 14 MAR 21:51Z
    stm32: usb: Infinite while loop in Interrupt Handler
    cvelistv5