USB Host AudioStreaming Descriptor Count Out-of-Bounds Write

STM32Cube USB Host Library 3.5.4 and earlier increments the AudioStreaming descriptor count without checking the five-entry as_desc array capacity. A malicious USB audio device can supply more than five AudioStreaming descriptors and cause out-of-bounds writes during descriptor parsing, resulting in memory corruption or a host crash. ST fixed the issue in USB Host Library 3.5.5.