Denial Of Service (DoS)

libtinyxml.so is vulnerable to Denial Of Service DoS. The vulnerability arises due to a reachable assertion in tinyxmlparser.cpp. An attacker can potentially crash the application via a crafted XML document with a \0 located after a whitespace...

CVE-2023-34194

StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion and application exit via a crafted XML document with a '\0' located after whitespace...

CVE-2023-34194

StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion and application exit via a crafted XML document with a '\0' located after whitespace...

CVE-2023-34194

CVE-2023-34194 affects TinyXML (TinyXML library) where StringEqual in TiXmlDeclaration::Parse within tinyxmlparser.cpp can trigger a reachable assertion and process exit when parsing a crafted XML containing a '\0' after whitespace. Affected versions include TinyXML up to 2.6.2. Debian LTS, Magei...

CVE-2023-34194

StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion and application exit via a crafted XML document with a '\0' located after whitespace...

TinyXML Security Vulnerability

TinyXML is a simple, small and minimal C++ Xml parser. A security vulnerability exists in TinyXML 2.6.2 and earlier versions, which stems from a security flaw in the file tinyxmlparser.cpp...

Denial of service

TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXMLUTFLEAD0 case. It can be triggered by a crafted XML message and leads to a denial of service...

UBUNTU-CVE-2021-42260

TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXMLUTFLEAD0 case. It can be triggered by a crafted XML message and leads to a denial of service...

CVE-2021-42260

CVE-2021-42260 affects TinyXML up to version 2.6.2. A crafted XML message can trigger an infinite loop in TiXmlParsingData::Stamp() inside tinyxmlparser.cpp when processing the TIXML_UTF_LEAD_0 case, causing a denial of service. Connected advisories confirm the issue and note mitigating fixes are...