CVE-2019-14872CWE-476

The _dtoa_r function of the newlib libc library, prior to version 3.3.0, performs multiple memory allocations without checking their return value

Medium · published March 19, 2020

CVSS v3.0
6.5
EPSS
1%
Percentile
73.2
In the wild
Unconfirmed
What it is

The _dtoa_r function of the newlib libc library, prior to version 3.3.0, performs multiple memory allocations without checking their return value. This could result in NULL pointer dereference.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01453 · 73.2th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2020-03-19T12:35Z
EPSS history
Timeline
  • 19 MAR 12:35Z
    The _dtoa_r function of the newlib libc library, prior to version 3.3.0, performs multiple memory allocations without checking their return value
    cvelistv5