An app note from ST, USB DFU protocol used in the STM32 bootloader (PDF!):
This application note describes the USB DFU protocol used in STM32 microcontroller bootloader. It details each supported command. For more information about the USB hardware resources and requirements for your device bootloader, please refer to the “STM32 system memory boot mode” application note (AN2606)