CVE-2024-50615

Опубликовано: 27 окт. 2024

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.

Ссылки

https://github.com/leethomason/tinyxml2/issues/997
Exploit
Issue Tracking

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tinyxml2_project:tinyxml2:*:*:*:*:*:*:*:*

Версия до 10.0.0 (включая)

EPSS

Процентиль: 35%

0.00409

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-617

Связанные уязвимости

CVE-2024-50615

CVSS3: 6.5

ubuntu

около 2 лет назад

TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.

CVE-2024-50615

CVSS3: 6.5

msrc

больше 1 года назад

TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.

CVE-2024-50615

CVSS3: 6.5

debian

около 2 лет назад

TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, ...

GHSA-884x-p7qm-gq3f

CVSS3: 6.5

github

около 2 лет назад

TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.

ALT-PU-2025-12799

CVSS3: 6.5

altlinux

около 1 года назад

ALT-PU-2025-12799: package `tinyxml2` update to version 11.0.0-alt1

EPSS

Процентиль: 35%

0.00409

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-617