Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
These 2 releases credit 2 lines.
2 are still open to claim.
One mark per credit line
Open
Claimed
-
Hathach CVE-2026-61497
TinyUSB before 0.20.1 contains an integer underflow vulnerability in the HID host report descriptor parser tuh_hid_parse_report_descriptor() in src/class/hid/hi
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hathach CVE-2026-61495
TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write vulnerability in the MTP device class helper mtp_container_get_string() in src/
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit