CVE-2018-11210

CVE-2018-11210 describes a heap-based buffer over-read vulnerability in the XMLDocument::Parse function of TinyXML2 version 6.2.0. While initially reported as a library vulnerability, the developers clarified it stems from improper library usage. This critical vulnerability, with a CVSS score of 9.8, allows unauthenticated attackers to achieve high impact on confidentiality, integrity, and availability over the network with low attack complexity. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.