Servers and applications
CVE-2019-13117
In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character.
- Severity
- Medium 5.3
- Published
- 1 Jul 2019
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 22 Oct 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
JavaServers and applications · cpe:a:oracle:openjdk |
|