Tinyxml2 (Tinyxml2 Project) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 40 known versions, newest CVE from 2024-10-27. Vendor: Tinyxml2 Project.

CVEs of Tinyxml2

• CVE-2024-50615 - CVSS 6.5 (medium), 2024-10-27: TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.
• CVE-2024-50614 - CVSS 6.5 (medium), 2024-10-27: TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.
• CVE-2018-11210 - CVSS 9.8 (critical), 2018-05-16: TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the…