curl: Format string vulnerability, curl_msnprintf() function

Summary: A vulnerability has been identified in the curl library’s formatted output functions specifically in curlmsnprintf and its related functions. When a malicious attacker-controlled format string containing the %hn conversion specifier is passed, the function incorrectly attempts to write t...

OSV-2020-600 Use-of-uninitialized-value in dprintf_formatf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16699 Crash type: Use-of-uninitialized-value Crash state: dprintfformatf curlmvsnprintf curlmsnprintf...