Approved changes feed: RSS · Atom

cpe:2.3:a:tinyxml2_project:tinyxml2:6.2.0:*:*:*:*:*:*:*

part: a version: 6.2.0 update: *

VendorTinyxml2 Project (2d4f313f-7e17-57c9-b6e7-d60c7412baa6)
ProductTinyxml2 (ceaa16f0-848d-5063-a719-86750af94482)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/frostbane/tinyxml2 purl2cpe 2026-06-01 10:14:47.892561
pkg:deb/debian/tinyxml2 purl2cpe 2026-06-01 10:14:47.892562
pkg:deb/ubuntu/tinyxml2 purl2cpe 2026-06-01 10:14:47.892563
pkg:github/leethomason/tinyxml2 purl2cpe 2026-06-01 10:14:47.892565
pkg:gitlab/redhat/tinyxml2 purl2cpe 2026-06-01 10:14:47.892566
pkg:rpm/centos/tinyxml2 purl2cpe 2026-06-01 10:14:47.892567
pkg:rpm/fedora/tinyxml2 purl2cpe 2026-06-01 10:14:47.892569
pkg:rpm/opensuse/tinyxml2 purl2cpe 2026-06-01 10:14:47.892570

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-11210 vulnerable 2026-06-08 05:10:37.966372 Details available
TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2
Published: 2018-05-16T15:00:00.000Z
Updated: 2024-08-05T08:01:52.407Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.