CVE-2024-50614

The TinyXML2 C++ XML parser (versions through 10.0.0 ) contains a reachable assertion for UINT_MAX/16 within the tinyxml2.cpp XMLUtil::GetCharacterRef function. This vulnerability can lead to an unexpected application exit . Affected software includes cppcheck (versions less than 2.18.3-1 ) and v...

CVE-2024-50615

The TinyXML2 C++ XML parser (versions through 10.0.0 ) contains a reachable assertion in the tinyxml2.cpp file within the XMLUtil::GetCharacterRef function. This flaw occurs during the calculation of UINT_MAX/digit , which may result in an application exit (crash) when processing certain XML docu...