USB Host Audio Format Descriptor Invalid Dereference

STM32Cube USB Host Library 3.5.4 and earlier dereferences Audio Streaming FormatTypeDesc pointers without first validating that a FORMAT_TYPE descriptor was found and lies within the parsed descriptor data. A malformed USB audio device can trigger a null-pointer dereference or out-of-bounds read during playback or frequency selection, causing a host crash. ST fixed the issue in USB Host Library 3.5.5.