Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-38pm-jr4r-8rj7

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

** DISPUTED ** TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2.

** DISPUTED ** TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2.

EPSS

Процентиль: 47%
0.00243
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 7 лет назад

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2

CVSS3: 4.4
redhat
больше 7 лет назад

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2

CVSS3: 9.8
nvd
больше 7 лет назад

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2

CVSS3: 9.8
debian
больше 7 лет назад

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::P ...

EPSS

Процентиль: 47%
0.00243
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-125