CVE-2018-11210

CRITICAL 9.8CVE-2018-11210 · Published 16/05/2018 · updated 17/06/2026

In short

CVE-2018-11210 is a CRITICAL (CVSS 9.8) vulnerability affecting tinyxml2 (tinyxml2 project).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tinyxml2 tinyxml2_project	`= 6.2.0`	No fix yet

Description

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2

References

leethomason/tinyxml2 · Third Party Advisory
leethomason/tinyxml2
leethomason/tinyxml2

More vulnerabilities in tinyxml2

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free