Read the docs

hathach

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

hathach records in CISA KEV

No hathach vulnerabilities are listed in CISA KEV.

Records

2 records

Priority LOW 32

TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write vulnerability in the MTP device class helper mtp_container_get_string() in src/class/mtp/mtp.h that allows a malicious USB host to corrupt…

CVSS 4.0HIGH 7.0 Physical No auth No interaction EPSS 0.00266 Published 2026-11-03 No fix listed CWE-787
Priority LOW 23

TinyUSB before 0.20.1 contains an integer underflow vulnerability in the HID host report descriptor parser tuh_hid_parse_report_descriptor() in src/class/hid/hid_host.c that allows a malicious USB device to trigger an ou…

CVSS 4.0MEDIUM 5.2 Physical No auth No interaction EPSS 0.00276 Published 2026-11-03 Fixed in 0.20.1 CWE-191
Open these records in search →