Skip to content
OpenAdvisories

Package · Debian

tinyusb

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.2
    CVE-2026-61497

    TinyUSB < 0.20.1 Integer Underflow via HID Report Descriptor Parser

    TinyUSB before 0.20.1 contains an integer underflow vulnerability in the HID host report descriptor parser tuh_hid_parse_report_descriptor() in src/class/hid/hid_host.c that allows a malicious USB device to trigger an out-of-bounds read by subtracting an item…

    hathach TinyUSB tinyusb tinyusb Debian Ubuntu
  • Medium 6.8
    CVE-2026-61495

    TinyUSB 0.21.0 Out-of-Bounds Write via mtp_container_get_string()

    TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write vulnerability in the MTP device class helper mtp_container_get_string() in src/class/mtp/mtp.h that allows a malicious USB host to corrupt adjacent memory by supplying a crafted …

    hathach TinyUSB tinyusb tinyusb Debian Ubuntu