OSV-2020-1065 Use-of-uninitialized-value in xsltNumberFormatInsertNumbers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14471 Crash type: Use-of-uninitialized-value Crash state: xsltNumberFormatInsertNumbers xsltNumberFormat xsltNumber...

PT-2020-21681

Name of the Vulnerable Software and Affected Versions libxslt affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the xsltNumberFormatInsertNumbers function, which is part of the xsltNumberFormat and xsltNumb...

libxslt Heap Buffer Overflow DoS

The vulnerability of the xsltNumberFormatInsertNumbers function in the libxslt library is related to the use of uninitialized tokens. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Format string

In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character...

PT-2019-4666

Name of the Vulnerable Software and Affected Versions libxslt version 1.1.33 Description The issue is related to the xsltNumberFormatInsertNumbers function in libxslt, where an xsl:number with certain format strings could lead to an uninitialized read. This could allow an attacker to discern...