CVE-2019-14873

Name of the Vulnerable Software and Affected Versions newlib libc library versions prior to 3.3.0

Description The issue arises in the multadd function of the newlib libc library. Specifically, when using Balloc to allocate a big integer, there is no verification to check if the allocation was successful. This oversight can lead to a null pointer dereference bug in the event of a memory allocation failure.

Recommendations For versions prior to 3.3.0, update to version 3.3.0 or later to resolve the issue.