hathach TinyUSB

• CVE-2026-61497 Medium 5.2 TinyUSB < 0.20.1 Integer Underflow via HID Report Descriptor Parser 0.3%
• CVE-2026-61495 Medium 6.8 TinyUSB 0.21.0 Out-of-Bounds Write via mtp_container_get_string() 0.3%