CVE-2019-14875

In the multiply function of the newlib libc library, all versions prior to 3.3.0 see newlib/libc/stdlib/mprec.c, Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access of x0 will trigger a null pointer dereference bug in ca...

CVE-2019-14873

In the multadd function of the newlib libc library, prior to versions 3.3.0 see newlib/libc/stdlib/mprec.c, Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. This will trigger a null pointer dereference bug in case of a memory...

CVE-2019-14873

In the multadd function of the newlib libc library, prior to versions 3.3.0 see newlib/libc/stdlib/mprec.c, Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. This will trigger a null pointer dereference bug in case of a memory...

Null pointer dereference

In the multiply function of the newlib libc library, all versions prior to 3.3.0 see newlib/libc/stdlib/mprec.c, Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access of x0 will trigger a null pointer dereference bug in ca...

CVE-2019-14878

In the d2b function of the newlib libc library, all versions prior to 3.3.0 see newlib/libc/stdlib/mprec.c, Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. Accessing x will trigger a null pointer dereference bug in case of a...

CVE-2019-14875

In the multiply function of the newlib libc library, all versions prior to 3.3.0 see newlib/libc/stdlib/mprec.c, Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access of x0 will trigger a null pointer dereference bug in ca...

CVE-2019-14875

In the multiply function of the newlib libc library, all versions prior to 3.3.0 see newlib/libc/stdlib/mprec.c, Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access of x0 will trigger a null pointer dereference bug in ca...

CVE-2019-14874

In the i2b function of the newlib libc library, all versions prior to 3.3.0 see newlib/libc/stdlib/mprec.c, Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access of x0 will trigger a null pointer dereference bug in case of...

CVE-2019-14878

In the d2b function of the newlib libc library, all versions prior to 3.3.0 see newlib/libc/stdlib/mprec.c, Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. Accessing x will trigger a null pointer dereference bug in case of a...

CVE-2019-14873

The CVE-2019-14873 issue affects the newlib libc library (older releases, prior to 3.3.0). In the __multadd function, the code path allocates a big integer via Balloc without verifying allocation success, enabling a null pointer dereference on allocation failure. This is the explicit root cause d...

PT-2020-9614

Name of the Vulnerable Software and Affected Versions newlib libc library versions prior to 3.3.0 Description The issue arises in the multiply function of the newlib libc library, where memory allocation using Balloc for a big integer does not include a check for allocation success. This oversigh...

PT-2020-9613

Name of the Vulnerable Software and Affected Versions newlib libc library versions prior to 3.3.0 Description The issue arises in the i2b function of the newlib libc library, where memory allocation using Balloc does not include a check for allocation success. This oversight can lead to a null...

PT-2020-9612

Name of the Vulnerable Software and Affected Versions newlib libc library versions prior to 3.3.0 Description The issue arises in the multadd function of the newlib libc library. Specifically, when using Balloc to allocate a big integer, there is no verification to check if the allocation was...

PT-2020-9616

Name of the Vulnerable Software and Affected Versions newlib libc library versions prior to 3.3.0 Description The issue arises in the mdiff function of the newlib libc library, where memory allocation using Balloc for big integers does not include a check for allocation success. This oversight ca...

PT-2020-9615

Name of the Vulnerable Software and Affected Versions newlib libc library versions prior to 3.3.0 Description The issue arises in the lshift function of the newlib libc library, where memory allocation using Balloc for a big integer does not include a check for allocation success. This oversight...

PT-2020-9617

Name of the Vulnerable Software and Affected Versions newlib libc library versions prior to 3.3.0 Description The issue arises in the d2b function of the newlib libc library, where Balloc is used to allocate a big integer without verifying if the allocation was successful. This can lead to a null...