VIR Vulnerability Intelligence Relay

CVE-2018-11210

high
Published — · Modified —
CVSS v3
—
CVSS v2
—
VIR risk
8.0

Description

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2018-11210

OS impact
OSVersionStatusFixed in
arch archaffected
debian debianbookwormaffected
debian debianbullseyeaffected
debian debianforkyaffected
debian debiansidaffected
debian debiantrixieaffected

References

Verify integrity in audit chain (admin only). AS-IS.