Description (CNA)
The _dtoa_r function of the newlib libc library, prior to version 3.3.0, performs multiple memory allocations without checking their return value. This could result in NULL pointer dereference.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Hat / newlib | affected all newlib versions prior to 3.3.0 |
CWE
CWE-476
References
- https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
ADP enrichment
No English description supplied.