CVE-2024-50615: Medium severity TinyXML TinyXML2 vulnerability
TinyXML2 through 10.0.0 has a reachable assertion for UINTMAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 9.0.0-2
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50615?
CVE-2024-50615 is classified as a critical vulnerability due to the potential for application exit.
How does CVE-2024-50615 affect TinyXML2 users?
Users of TinyXML2 version 10.0.0 and earlier may encounter an assertion failure that could lead to unexpected application termination.
What versions of TinyXML2 are affected by CVE-2024-50615?
CVE-2024-50615 affects TinyXML2 versions up to and including 10.0.0.
How can developers mitigate CVE-2024-50615?
To mitigate CVE-2024-50615, developers should upgrade TinyXML2 to a version newer than 10.0.0.
Is there a patch available for CVE-2024-50615?
Yes, users should check the latest releases of TinyXML2 for any patches addressing CVE-2024-50615.