TopVuln

High-risk vulnerability digests

CVE-2019-14872

  • MEDIUM

Details

CVSS v3
6.5
CVSS v2
4.0
NVD published
2020-03-19 13:15:12
Affected versions
cpe:2.3:a:newlib_project:newlib:*:*:*:*:*:*:*:*
Summary
The _dtoa_r function of the newlib libc library, prior to version 3.3.0, performs multiple memory allocations without checking their return value. This could result in NULL pointer dereference.
Remediation
Not available in our cache.
Exploit info
https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/

View on NVD

TopVuln sends digest emails with high-risk CVE picks across multiple authoritative sources—curated with EPSS and AI. Choose daily per-stream emails and optional weekly or monthly roundups.

Subscribe — free email digest or paid plan

Information is aggregated from multiple authoritative sources for convenience; verify with NVD and vendors before operational decisions.