OSV-2025-767

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tinyusb/OSV-2025-767.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-767
Published
2025-09-20T00:19:20Z
Modified
2025-09-20T00:19:20Z
Summary
UNKNOWN READ in dcd_int_handler
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=445845231

Crash type: UNKNOWN READ
Crash state:
dcd_int_handler
fuzz.cc
References

Affected packages

OSS-Fuzz / tinyusb

Package

Name
tinyusb
Purl
pkg:generic/tinyusb

Affected ranges

Type
GIT
Repo
https://github.com/hathach/tinyusb.git
Events
Introduced
0263cfc01ab63d6799e80cbbf691af1979cf3ab7
Fixed
20c36442246279d884a6b61066fda6778c1c06ee

Affected versions

0.*
0.19.0

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

fixed_range 
"8b8f1f80b4f01fc0fc56ad58af9b784e161636b0:20c36442246279d884a6b61066fda6778c1c06ee"
introduced_range 
"059236998ecb24a30daa8262f8d17ccba4ed3f6d:4a8b8220d94ccf16bbab47eac6340ce8572eb7b4"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tinyusb/OSV-2025-767.yaml"