CVE-2021-42260

CVE-2021-42260 affects TinyXML up to version 2.6.2. A crafted XML message can trigger an infinite loop in TiXmlParsingData::Stamp() inside tinyxmlparser.cpp when processing the TIXML_UTF_LEAD_0 case, causing a denial of service. Connected advisories confirm the issue and note mitigating fixes are...

CVE-2023-34194

CVE-2023-34194 affects TinyXML (TinyXML library) where StringEqual in TiXmlDeclaration::Parse within tinyxmlparser.cpp can trigger a reachable assertion and process exit when parsing a crafted XML containing a '\0' after whitespace. Affected versions include TinyXML up to 2.6.2. Debian LTS, Magei...