CVE-2024-50614

CVE-2024-50614 affects TinyXML-2 (up to 10.0.0). The issue is a reachable assertion in tinyxml2.cpp XMLUtil::GetCharacterRef for UINT_MAX/16 that may cause the application to exit. The OSV entries and Fedora advisories indicate a security update extending TinyXML-2 to 11.0.0 to fix this and relat...

CVE-2024-50615

Summary: CVE-2024-50615 affects TinyXML-2 up to and including 10.0.0, with a reachable assertion in XMLUtil::GetCharacterRef that may cause an application exit. The connected OSV entries document multiple security updates for tinyxml2 across platforms and note the same root cause (UINT_MAX/digit)...