CVE-2024-50614: TINYXML2 Project TINYXML2

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.

Affected products

• TINYXML2 Project TINYXML2: up to and including 10.0.0

Published 2024-10-27. Last modified 2026-06-17.