CVE-2026-61497

TinyUSB before 0.20.1 contains an integer underflow vulnerability in the HID host report descriptor parser tuhhidparsereportdescriptor in src/class/hid/hidhost.c that allows a malicious USB device to trigger an out-of-bounds read by subtracting an item size from the remaining descriptor length...