-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability description explicitly mentions xsltNumberFormatDecimal as the function receiving invalid combinations due to a type mismatch in grouping character handling. The CWE-843 (Type Confusion) classification and libxslt commit history (though inaccessible) corroborate this being the vulnerable function in numbers.c. The exposure of uninitialized stack data directly points to memory safety issues in this decimal formatting function.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| nokogiri | rubygems | < 1.10.5 | 1.10.5 |