CVE-2024-50614 TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Identified in TinyXML2 Affecting Application Stability Two vulnerabilities, CVE-2024-50614 and CVE-2024-50615, have been identified in TinyXML2 versions up to 10.0.0. Both vulnerabilities involve reachable assertions in the XMLUtil::GetCharacterRef function, which may lead to application exits. Affected users should be aware of these issues as they could impact application performance. 2 sources 34

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)