CVE-2018-11210: tinyxml2: heap-based buffer over-read in the XMLDocument::Parse function

Severity: Critical

CVSS Score: 9.8

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2