GCVE - cpe:2.3:a:tinyxml2_project:tinyxml2:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tinyxml2_project:tinyxml2:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Tinyxml2 Project (`2d4f313f-7e17-57c9-b6e7-d60c7412baa6`)
Product	Tinyxml2 (`ceaa16f0-848d-5063-a719-86750af94482`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:bitbucket/frostbane/tinyxml2`	purl2cpe	2026-06-01 10:14:47.892185
`pkg:deb/debian/tinyxml2`	purl2cpe	2026-06-01 10:14:47.892188
`pkg:deb/ubuntu/tinyxml2`	purl2cpe	2026-06-01 10:14:47.892191
`pkg:github/leethomason/tinyxml2`	purl2cpe	2026-06-01 10:14:47.892193
`pkg:gitlab/redhat/tinyxml2`	purl2cpe	2026-06-01 10:14:47.892196
`pkg:rpm/centos/tinyxml2`	purl2cpe	2026-06-01 10:14:47.892199
`pkg:rpm/fedora/tinyxml2`	purl2cpe	2026-06-01 10:14:47.892201
`pkg:rpm/opensuse/tinyxml2`	purl2cpe	2026-06-01 10:14:47.892204

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-50615`	vulnerable	2026-06-08 06:52:11.287947	Details available TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef. Published: 2024-10-27T00:00:00.000Z Updated: 2024-10-30T19:17:42.467Z Open on db.gcve.eu Reference links https://github.com/leethomason/tinyxml2/issues/997	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-50614`	vulnerable	2026-06-08 06:52:11.287426	Details available TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef. Published: 2024-10-27T00:00:00.000Z Updated: 2024-10-30T19:15:39.804Z Open on db.gcve.eu Reference links https://github.com/leethomason/tinyxml2/issues/996	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.