Buffer Vulnerability in libxslt Affecting Multiple Vendors

CVE-2019-18197

What is CVE-2019-18197?

In libxslt version 1.1.33, the function xsltCopyText contains a flaw where a pointer variable is not properly reset under certain conditions. This oversight can result in writing outside the intended buffer, particularly when the relevant memory area has been freed and subsequently reused. As a consequence, such vulnerabilities may lead to unpredictable behavior including memory corruption, potential data leakage, or exposure of uninitialized memory contents, posing risks to the integrity and confidentiality of the application.

References