CVE-2019-14871: Null Pointer Dereference
The REENTCHECK macro (see newlib/libc/include/sys/reent.h) as used by REENTCHECKTM, REENTCHECKMISC, REENTCHECKMP and other newlib macros in versions prior to 3.3.0, does not check for memory allocation problems when the DEBUG flag is unset (as is the case in production firmware builds).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-14871?
CVE-2019-14871 is classified as a medium severity vulnerability due to the risk of memory allocation issues in production systems.
How do I fix CVE-2019-14871?
To fix CVE-2019-14871, you should upgrade Newlib to version 3.3.0 or later.
What does CVE-2019-14871 affect?
CVE-2019-14871 affects Newlib versions prior to 3.3.0, particularly impacting production firmware builds.
Can CVE-2019-14871 lead to application crashes?
Yes, CVE-2019-14871 can lead to application crashes due to unhandled memory allocation problems.
Is CVE-2019-14871 particularly dangerous in production environments?
Yes, CVE-2019-14871 is particularly dangerous in production environments where the DEBUG flag is typically unset.