Null Pointer Dereference Vulnerability in Newlib libc Library

CVE-2019-14878

What is CVE-2019-14878?

The vulnerability arises in the __d2b function of the Newlib libc library, where the Balloc function allocates a big integer without validating the success of the memory allocation. This oversight can lead to a null pointer dereference when attempting to access an uninitialized pointer, resulting in potential application crashes or unexpected behavior.

References