CVE-2026-4179: Zephyrproject Zephyr

Medium severity, CVSS 6.1. EPSS: 0.1% chance of exploitation in the next 30 days.

Issues in stm32 USB device driver (drivers/usb/device/usb_dc_stm32.c) can lead to an infinite while loop.

Affected products

• Zephyrproject Zephyr: up to and including 4.3.0

Published 2026-03-16. Last modified 2026-06-17.