CVE-2023-34194

StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a crafted XML…

published December 13, 2023

CVSS
—
EPSS
1%
Percentile
71.7
In the wild
Unconfirmed
What it is

StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a crafted XML document with a '\0' located after whitespace.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01372 · 71.7th percentile
Published
2023-12-13T00:00Z
EPSS history
Timeline
  • 13 DEC 00:00Z
    StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a crafted XML…
    cvelistv5