The _dtoa_r function of the newlib libc library, prior to version 3.3.0, performs multiple memory allocations without checking their return value. This could result in NULL pointer dereference.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Newlib | Newlib_project | * | 3.3.0 (excluding) |
| Gcc-snapshot | Ubuntu | bionic | * |
| Gcc-snapshot | Ubuntu | trusty | * |
| Gcc-snapshot | Ubuntu | xenial | * |
| Newlib | Ubuntu | bionic | * |
| Newlib | Ubuntu | eoan | * |
| Newlib | Ubuntu | esm-apps/bionic | * |
| Newlib | Ubuntu | esm-apps/xenial | * |
| Newlib | Ubuntu | groovy | * |
| Newlib | Ubuntu | hirsute | * |
| Newlib | Ubuntu | impish | * |
| Newlib | Ubuntu | kinetic | * |
| Newlib | Ubuntu | trusty | * |
| Newlib | Ubuntu | upstream | * |
| Newlib | Ubuntu | xenial | * |