Null Pointer Dereference Vulnerability in Newlib libc Library

CVE-2019-14874

What is CVE-2019-14874?

In the i2b function of the Newlib libc library, all versions before 3.3.0 are affected by a null pointer dereference issue. The Balloc function is utilized for large integer memory allocation without confirming if the allocation was successful. This oversight can lead to a null pointer dereference crash when there is a memory allocation failure, which may compromise application stability and lead to service disruptions. Developers utilizing affected versions should update to prevent potential exploitation.

References