Vulnerabilities

TI-2024-34037 CVE-2024-50615 · GHSA-884x-p7qm-gq3f

TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to…

MEDIUM 62

TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00409 Published 2024-10-27 No fix listed CWE-617

TI-2024-34036 CVE-2024-50614 · GHSA-xpm9-95h9-q996

MEDIUM 62

TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00442 Published 2024-10-27 No fix listed CWE-617

TI-2018-07975 CVE-2018-11210 · GHSA-38pm-jr4r-8rj7

MEDIUM 46

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02275 Published 2018-05-16 No fix listed CWE-125