Beveiligingsadvies

CVE-2019-18197

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-10-18 20:07:17
Laatst bijgewerkt 2026-05-28 18:27:59
Toegewezen door mitre
CVSS-score 7.5
Status PUBLISHED

Beschrijving

In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.