CVE-2019-14872: Null Pointer Dereference
Published Mar 19, 2020
·Updated
The dtoar function of the newlib libc library, prior to version 3.3.0, performs multiple memory allocations without checking their return value. This could result in NULL pointer dereference.
Affected Software
1 affected component
Newlib Project Newlib<3.3.0
Event History
Mar 19, 2020
CVE Published
via MITRE·12:35 PM
Data Sourced
via MITRE·12:35 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-14872?
CVE-2019-14872 is classified as medium severity due to the potential for NULL pointer dereference.
2
How do I fix CVE-2019-14872?
To fix CVE-2019-14872, upgrade to Newlib version 3.3.0 or later, which addresses the vulnerability.
3
What software is affected by CVE-2019-14872?
CVE-2019-14872 affects versions of the newlib libc library prior to 3.3.0.
4
What can happen if CVE-2019-14872 is exploited?
Exploiting CVE-2019-14872 could lead to application crashes or unpredictable behavior due to NULL pointer dereference.
5
Is CVE-2019-14872 easy to exploit?
Exploitation of CVE-2019-14872 may require specific conditions and access to the affected application context.