OSV-2020-1065 Use-of-uninitialized-value in xsltNumberFormatInsertNumbers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14471 Crash type: Use-of-uninitialized-value Crash state: xsltNumberFormatInsertNumbers xsltNumberFormat xsltNumber...

The vulnerability of the xsltNumberFormatInsertNumbers function in the libxslt library allows a hacker to gain unauthorized access to protected information.

The vulnerability of the xsltNumberFormatInsertNumbers function in the libxslt library is related to the use of uninitialized tokens. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Format string

In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character...