CVE-2024-50614

The TinyXML2 C++ XML parser (versions through 10.0.0 ) contains a reachable assertion for UINT_MAX/16 within the tinyxml2.cpp XMLUtil::GetCharacterRef function. This vulnerability can lead to an unexpected application exit . Affected software includes cppcheck (versions less than 2.18.3-1 ) and v...

CVE-2024-50615

The TinyXML2 C++ XML parser (versions through 10.0.0 ) contains a reachable assertion in the tinyxml2.cpp file within the XMLUtil::GetCharacterRef function. This flaw occurs during the calculation of UINT_MAX/digit , which may result in an application exit (crash) when processing certain XML docu...

CVE-2018-11210

TinyXML2 6.2.0 is affected by a heap-based buffer over-read in XMLDocument::Parse (libtinyxml2.so). The CVE-2018-11210 entry notes this is due to improper use of the library and not a vulnerability in tinyxml2. NVD data lists a high/severe impact (CVSS v3: 9.8, NETWORK/NO AUTH required; all impac...