{"id":"CVE-2024-50615","aliases":["AZL-51871","AZL-51884","AZL-51888","AZL-51999","AZL-52020","DEBIAN-CVE-2024-50615","EUVD-2024-44978","GHSA-884x-p7qm-gq3f","OESA-2026-1247","OESA-2026-1282","OESA-2026-1283","OESA-2026-1284","OESA-2026-1349","OESA-2026-1350","UBUNTU-CVE-2024-50615","openSUSE-SU-2025:14866-1"],"status":"published","title":"TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to...","description":"TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00409,"percentile":0.35686,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-617"],"published":"2024-10-27T00:00:00Z","modified":"2026-11-09T12:49:26Z","fixes":[{"ecosystem":"Azure Linux:3","package":"cppcheck","fixed_in":["2.18.3-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"tinyxml2","fixed_in":["9.0.0-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"tinyxml2","fixed_in":["9.0.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tinyxml2","fixed_in":["10.1.0+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tinyxml2","fixed_in":["10.1.0+dfsg-1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"tinyxml2","fixed_in":["10.1.0-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"cppcheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.7-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"cppcheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.3-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"blobfuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.4.5-17"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.0-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.0-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["10.0.0+dfsg-2","10.1.0+dfsg-1","11.0.0+dfsg-1","9.0.0+dfsg-3.1"]},{"source":"osv","ecosystem":"Debian:13","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.1.0+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.1.0+dfsg-1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.0-2.oe2403sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.0-2.oe2403"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.0-2.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-6.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-6.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.0-2.oe2403sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0~git20120518.1.a2ae54e-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.0-1.1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.1-1","6.0.0+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.0.0+dfsg-1","7.0.0+dfsg-1build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.1.0+really8.0.0+dfsg-1","9.0.0+dfsg-3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.0.0+dfsg-3.1","10.0.0+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["10.0.0+dfsg-2","11.0.0+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["11.0.0+dfsg-1build1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"tinyxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.1.0-1.1"}]}]}],"products":[{"vendor":"tinyxml2_project","product":"tinyxml2"}],"references":[{"url":"https://github.com/leethomason/tinyxml2/issues/997","tags":["Exploit","Issue Tracking","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50615","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-884x-p7qm-gq3f"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50615.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-50615","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1247","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50614","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1282","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1283","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1284","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1349","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1350","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-50615","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-50615","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IHNJBHHW332SST3NIL5HAXV6TBUMAQND/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50615","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-50615","description":"TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.","status":"published","published":"2024-10-27T00:00:00Z","modified":"2024-10-30T19:17:42.467Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:34:21.784174Z"}],"euvd":[{"id":"EUVD-2024-44978","description":"TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.","status":"published","published":"2024-10-27T00:00:00Z","modified":"2024-10-30T19:17:42Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:05:13.91882Z"}],"ghsa":[{"id":"GHSA-884x-p7qm-gq3f","title":"TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to...","description":"TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.","status":"published","published":"2024-10-28T00:30:48Z","modified":"2024-10-30T21:31:42Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:58:39.78243Z"}],"nvd":[{"id":"CVE-2024-50615","description":"TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.","status":"published","published":"2024-10-27T22:15:03.76Z","modified":"2026-06-17T08:04:48.803Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:10:34.877798Z"}],"osv":[{"id":"CVE-2024-50615","description":"TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.","status":"published","published":"2024-10-27T00:00:00Z","modified":"2026-10-28T02:30:45.422204783Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:44.032344Z"},{"id":"DEBIAN-CVE-2024-50615","description":"TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.","status":"published","published":"2024-10-27T22:15:03.76Z","modified":"2026-11-02T12:03:07.297137414Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:44.117337Z"},{"id":"OESA-2026-1247","title":"tinyxml2 security update","description":"TinyXML-2 is a simple, small, efficient, C++ XML parser that can be easily integrated into other programs.  TinyXML-2 parses an XML document, and builds  from that a Document Object Model (DOM) that can be read, modified, and saved.\r\n\r\nSecurity Fix(es):\n\nTinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.(CVE-2024-50614)\n\nTinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.(CVE-2024-50615)","status":"published","published":"2026-01-30T11:10:16Z","modified":"2026-08-18T01:19:30.456511511Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2026-1282","title":"tinyxml2 security update","description":"TinyXML-2 is a simple, small, efficient, C++ XML parser that can be easily integrated into other programs.  TinyXML-2 parses an XML document, and builds  from that a Document Object Model (DOM) that can be read, modified, and saved.\r\n\r\nSecurity Fix(es):\n\nTinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.(CVE-2024-50614)\n\nTinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.(CVE-2024-50615)","status":"published","published":"2026-02-06T11:10:18Z","modified":"2026-08-18T01:19:31.524212938Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2026-1283","title":"tinyxml2 security update","description":"TinyXML-2 is a simple, small, efficient, C++ XML parser that can be easily integrated into other programs.  TinyXML-2 parses an XML document, and builds  from that a Document Object Model (DOM) that can be read, modified, and saved.\r\n\r\nSecurity Fix(es):\n\nTinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.(CVE-2024-50614)\n\nTinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.(CVE-2024-50615)","status":"published","published":"2026-02-06T11:10:18Z","modified":"2026-08-18T01:19:31.530710961Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2026-1284","title":"tinyxml2 security update","description":"TinyXML-2 is a simple, small, efficient, C++ XML parser that can be easily integrated into other programs.  TinyXML-2 parses an XML document, and builds  from that a Document Object Model (DOM) that can be read, modified, and saved.\r\n\r\nSecurity Fix(es):\n\nTinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.(CVE-2024-50614)\n\nTinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.(CVE-2024-50615)","status":"published","published":"2026-02-06T11:10:18Z","modified":"2026-08-18T01:19:31.631895786Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2026-1349","title":"tinyxml2 security update","description":"TinyXML-2 is a simple, small, efficient, C++ XML parser that can be easily integrated into other programs.  TinyXML-2 parses an XML document, and builds  from that a Document Object Model (DOM) that can be read, modified, and saved.\r\n\r\nSecurity Fix(es):\n\nTinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.(CVE-2024-50614)\n\nTinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.(CVE-2024-50615)","status":"published","published":"2026-02-13T11:10:22Z","modified":"2026-08-18T01:19:33.003208693Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1350","title":"tinyxml2 security update","description":"TinyXML-2 is a simple, small, efficient, C++ XML parser that can be easily integrated into other programs.  TinyXML-2 parses an XML document, and builds  from that a Document Object Model (DOM) that can be read, modified, and saved.\r\n\r\nSecurity Fix(es):\n\nTinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.(CVE-2024-50614)\n\nTinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.(CVE-2024-50615)","status":"published","published":"2026-02-13T11:10:22Z","modified":"2026-08-18T01:19:33.222482724Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"UBUNTU-CVE-2024-50615","description":"TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.","status":"published","published":"2024-10-27T22:15:00Z","modified":"2026-11-09T12:49:26.504479791Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-09T13:27:42.046613Z"},{"id":"AZL-51871","title":"CVE-2024-50615 affecting package cppcheck 2.7-2","description":"TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.","status":"published","published":"2024-10-27T22:15:03Z","modified":"2026-04-21T04:33:16.65857Z","updated_at":"2026-11-02T15:28:06.3228Z"},{"id":"AZL-51884","title":"CVE-2024-50615 affecting package cppcheck for versions less than 2.18.3-1","description":"TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.","status":"published","published":"2024-10-27T22:15:03Z","modified":"2026-04-21T04:54:18.387385Z","updated_at":"2026-11-02T15:28:06.3228Z"},{"id":"AZL-51888","title":"CVE-2024-50615 affecting package blobfuse 1.4.5-17","description":"TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.","status":"published","published":"2024-10-27T22:15:03Z","modified":"2026-04-21T04:33:16.646453Z","updated_at":"2026-11-02T15:28:06.3228Z"},{"id":"AZL-51999","title":"CVE-2024-50615 affecting package tinyxml2 for versions less than 9.0.0-2","description":"TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.","status":"published","published":"2024-10-27T22:15:03Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:20.675084Z"},{"id":"AZL-52020","title":"CVE-2024-50615 affecting package tinyxml2 for versions less than 9.0.0-2","description":"TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.","status":"published","published":"2024-10-27T22:15:03Z","modified":"2026-04-21T04:33:18.938258Z","updated_at":"2026-11-02T15:28:06.3228Z"},{"id":"openSUSE-SU-2025:14866-1","title":"libtinyxml2-10-10.1.0-1.1 on GA media","description":"These are all security issues fixed in the libtinyxml2-10-10.1.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-10T00:00:00Z","modified":"2026-02-04T04:40:55.131913Z","updated_at":"2026-11-02T16:58:37.399567Z"}]}}