Back
CVE-2019-13118
In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid…
Medium5.3EPSS 5.1%
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | Medium5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
| NVDNVD · Modified | 3.1 | Medium5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
- EPSS (exploitation in 30 days)
- 5.1% · top 7.5% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: yes · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.3.
Weakness
Affected products
n/a
- affected n/a
Affected packages
From reviewed advisories of the GitHub Advisory Database.
- RubyGemsnokogiriGHSA-cf46-6xxh-pc75 (opens in a new tab)
References (41)
- https://gitlab.gnome.org/GNOME/libxslt/commit/6ce8de69330783977dd14f6569419489875fb71b (opens in a new tab)x_refsource_MISCx_transferred
- https://oss-fuzz.com/testcase-detail/5197371471822848 (opens in a new tab)x_refsource_MISCx_transferred
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15069 (opens in a new tab)x_refsource_MISCx_transferred
- https://support.apple.com/kb/HT210348 (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://support.apple.com/kb/HT210353 (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://support.apple.com/kb/HT210351 (opens in a new tab)x_refsource_CONFIRMx_transferred
- [debian-lts-announce] 20190722 [SECURITY] [DLA 1860-1] libxslt security update (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- https://support.apple.com/kb/HT210346 (opens in a new tab)x_refsource_CONFIRMx_transferred
- 20190723 APPLE-SA-2019-7-22-1 iOS 12.4 (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 20190723 APPLE-SA-2019-7-22-5 tvOS 12.4 (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 20190723 APPLE-SA-2019-7-22-4 watchOS 5.3 (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 20190723 APPLE-SA-2019-7-22-4 watchOS 5.3 (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
- 20190723 APPLE-SA-2019-7-22-1 iOS 12.4 (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
- 20190723 APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
- 20190723 APPLE-SA-2019-7-22-5 tvOS 12.4 (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
- https://support.apple.com/kb/HT210356 (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://support.apple.com/kb/HT210357 (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://support.apple.com/kb/HT210358 (opens in a new tab)x_refsource_CONFIRMx_transferred
- 20190724 APPLE-SA-2019-7-23-2 iTunes for Windows 12.9.6 (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 20190724 APPLE-SA-2019-7-23-3 iCloud for Windows 10.6 (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 20190724 APPLE-SA-2019-7-23-1 iCloud for Windows 7.13 (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 20190726 APPLE-SA-2019-7-23-3 iCloud for Windows 10.6 (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
- 20190726 APPLE-SA-2019-7-23-1 iCloud for Windows 7.13 (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
- 20190726 APPLE-SA-2019-7-23-2 iTunes for Windows 12.9.6 (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
- https://security.netapp.com/advisory/ntap-20190806-0004/ (opens in a new tab)x_refsource_CONFIRMx_transferred
- 20190814 APPLE-SA-2019-8-13-2 Additional information for APPLE-SA-2019-7-22-1 iOS 12.4 (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 20190814 APPLE-SA-2019-8-13-3 Additional information for APPLE-SA-2019-7-22-4 watchOS 5.3 (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 20190814 APPLE-SA-2019-8-13-4 Additional information for APPLE-SA-2019-7-22-5 tvOS 12.4 (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 20190814 APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 20190816 APPLE-SA-2019-8-13-3 Additional information for APPLE-SA-2019-7-22-4 watchOS 5.3 (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
- 20190816 APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
- 20190816 APPLE-SA-2019-8-13-2 Additional information for APPLE-SA-2019-7-22-1 iOS 12.4 (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
- 20190816 APPLE-SA-2019-8-13-4 Additional information for APPLE-SA-2019-7-22-5 tvOS 12.4 (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
- USN-4164-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- FEDORA-2019-fdf6ec39b4 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
- [oss-security] 20191117 Nokogiri security update v1.10.5 (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- https://www.oracle.com/security-alerts/cpujan2020.html (opens in a new tab)x_refsource_MISCx_transferred
- https://security.netapp.com/advisory/ntap-20200122-0003/ (opens in a new tab)x_refsource_CONFIRMx_transferred
- openSUSE-SU-2020:0731 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisory GHSA-cf46-6xxh-pc75 (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2019-13118)Record last updated .