CVE-2019-14877

Name of the Vulnerable Software and Affected Versions newlib libc library versions prior to 3.3.0

Description The issue arises in the mdiff function of the newlib libc library, where memory allocation using Balloc for big integers does not include a check for allocation success. This oversight can lead to a null pointer dereference bug when accessing wds and sign if memory allocation fails.

Recommendations For versions prior to 3.3.0, update to version 3.3.0 or later to resolve the issue.