Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: hathach Clear all filters
TI-2026-84565 CVE-2026-61497 · GHSA-qf63-w79j-qw7p

Integer underflow in TinyUSB HID report descriptor parser

Priority LOW 23

TinyUSB before 0.20.1 contains an integer underflow vulnerability in the HID host report descriptor parser tuh_hid_parse_report_descriptor() in src/class/hid/hid_host.c that allows a malicious USB device to trigger an ou…

CVSS 4.0MEDIUM 5.2 Physical No auth No interaction EPSS 0.00276 Published 2026-11-03 Fixed in 0.20.1 CWE-191
TI-2026-84558 CVE-2026-61495 · GHSA-cx2w-pw8j-8rvm

Out-of-bounds write in TinyUSB MTP helper enables memory corruption

Priority LOW 32

TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write vulnerability in the MTP device class helper mtp_container_get_string() in src/class/mtp/mtp.h that allows a malicious USB host to corrupt…

CVSS 4.0HIGH 7.0 Physical No auth No interaction EPSS 0.00266 Published 2026-11-03 No fix listed CWE-787