The _dtoa_r function of the newlib libc library, prior to version 3.3.0, performs multiple memory allocations without checking their return value. This could result in NULL pointer dereference.
The product dereferences a pointer that it expects to be valid but is NULL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Newlib | Newlib_project | * | 3.3.0 (excluding) |
| Gcc-snapshot | Ubuntu | bionic | * |
| Gcc-snapshot | Ubuntu | trusty | * |
| Gcc-snapshot | Ubuntu | xenial | * |
| Newlib | Ubuntu | bionic | * |
| Newlib | Ubuntu | eoan | * |
| Newlib | Ubuntu | esm-apps/bionic | * |
| Newlib | Ubuntu | esm-apps/xenial | * |
| Newlib | Ubuntu | groovy | * |
| Newlib | Ubuntu | hirsute | * |
| Newlib | Ubuntu | impish | * |
| Newlib | Ubuntu | kinetic | * |
| Newlib | Ubuntu | trusty | * |
| Newlib | Ubuntu | upstream | * |
| Newlib | Ubuntu | xenial | * |