USB Host Audio Control Descriptor Count Out-of-Bounds Write

STM32Cube USB Host Library 3.5.4 and earlier stores Audio Control class-specific descriptors in fixed arrays without bounding the Input, Output, Feature, Selector, and Mixer descriptor counters. A malicious USB audio device can provide excess descriptors during enumeration and cause out-of-bounds writes, memory corruption, or a host crash. ST fixed the issue in USB Host Library 3.5.5.