Hathach Tinyusb
2 CVEs affecting Hathach Tinyusb. Latest disclosed: 2026-11-03. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-61495 | Medium | 6.8 | 2026-11-03 | TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write vulnerability in the MTP device class helper mtp_container_get_string() in src… |
CVE-2026-61497 | Medium | 5.2 | 2026-11-03 | TinyUSB before 0.20.1 contains an integer underflow vulnerability in the HID host report descriptor parser tuh_hid_parse_report_descriptor() in src/class/hid/h… |