USB Host MTP Storage Count Out-of-Bounds Access

STM32Cube USB Host Library 3.5.4 and earlier trusts the storage count returned by an MTP device without bounding it to the five-entry Storage and storinfo arrays. A malicious MTP device can report excess storage IDs and trigger out-of-bounds accesses during initialization, causing memory corruption or a host crash. ST fixed the issue in USB Host Library 3.5.5.