CVE-2024-50614

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-50614

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50614.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-50614

Downstream

DEBIAN-CVE-2024-50614

OESA-2026-1247

OESA-2026-1282

OESA-2026-1283

OESA-2026-1284

OESA-2026-1349

OESA-2026-1350

UBUNTU-CVE-2024-50614

Published

2024-10-27T22:15:03.713Z

Modified

2025-11-20T12:28:34.110774Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.

References

https://github.com/leethomason/tinyxml2/issues/996

Affected packages

Git / github.com/leethomason/tinyxml2

Affected ranges

Type: GIT
Repo: https://github.com/leethomason/tinyxml2
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

321ea883b7190d4e85cae5512a12e5eaa8f8731f

Affected versions

10.*

10.0.0

2.*

2.0.1

2.0.2

2.1.0

2.2.0

3.*

3.0.0

4.*

4.0.0

4.0.1

5.*

5.0.1

6.*

6.0.0

6.2.0

7.*

7.0.0

7.0.1

7.1.0

8.*

8.0.0

8.1.0

9.*

9.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50614.json"