← Back

Tinyxml Project

tinyxml_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Tinyxml
tinyxml
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-34194
1Tinyxml Project
1Tinyxml
Jun 17, 2026
Dec 13, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a crafted XML document with a '\0' located after whitespace.
CVE-2021-42260
2Debian
Tinyxml Project
2Debian Linux
Tinyxml
Jun 17, 2026
Oct 11, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML message and leads to a denial of service.