libxslt: Multiple vulnerabilities (CVE-2019-13117, CVE-2019-13118)
CVE-2019-13117: an xsl number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers.
In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character.
CVE-2019-13118: read of uninitialized stack data due to too narrow xsl:number instruction and an invalid character.
In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data.