CVE-2019-13118

MEDIUM · CVSS 5.3 EPSS 5.19%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-07-01 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-13118

Severity

MEDIUM

CVSS

5.3

EPSS

5.19%

Original NVD Description

In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data.