Null Pointer Dereference Vulnerability in Newlib libc Library

CVE-2019-14873

What is CVE-2019-14873?

The Newlib libc library, prior to version 3.3.0, contains a vulnerability in the multadd function where the Balloc utility is used to allocate a big integer. A critical flaw arises because there is no verification to ensure that the memory allocation is successful. This oversight can lead to a null pointer dereference if the allocation fails, potentially resulting in application crashes or unexpected behaviors.

References