Approved changes feed: RSS · Atom
cpe:2.3:a:red_hat:newlib:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Red Hat (a3686528-5679-55c9-b393-abe45df26bd2) |
|---|---|
| Product | Newlib (f0c684f5-8d0d-564d-ad25-234454f29a86) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-14878 |
vulnerable | 2026-06-08 05:12:56.329437 |
Details available
MEDIUM (6.5)
In the __d2b function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. Accessing _x will trigger a null pointer dereference bug in case of a memory allocation failure.
Published: 2020-03-19T15:04:19.000Z
Updated: 2024-08-05T00:26:39.162Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14877 |
vulnerable | 2026-06-08 05:12:56.329112 |
Details available
MEDIUM (6.5)
In the __mdiff function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate big integers, however no check is performed to verify if the allocation succeeded or not. The access to _wds and _sign will trigger a null pointer dereference bug in case of a memory allocation failure.
Published: 2020-03-19T15:04:15.000Z
Updated: 2024-08-05T00:26:39.121Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14876 |
vulnerable | 2026-06-08 05:12:56.328813 |
Details available
MEDIUM (6.5)
In the __lshift function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access to b1 will trigger a null pointer dereference bug in case of a memory allocation failure.
Published: 2020-03-19T15:08:25.000Z
Updated: 2024-08-05T00:26:39.129Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14875 |
vulnerable | 2026-06-08 05:12:56.328507 |
Details available
MEDIUM (6.5)
In the __multiply function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access of _x[0] will trigger a null pointer dereference bug in case of a memory allocation failure.
Published: 2020-03-19T15:08:12.000Z
Updated: 2024-08-05T00:26:39.202Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14874 |
vulnerable | 2026-06-08 05:12:56.328197 |
Details available
MEDIUM (6.5)
In the __i2b function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access of _ x[0] will trigger a null pointer dereference bug in case of a memory allocation failure.
Published: 2020-03-19T15:07:52.000Z
Updated: 2024-08-05T00:26:39.142Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14873 |
vulnerable | 2026-06-08 05:12:56.327861 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14872 |
vulnerable | 2026-06-08 05:12:56.327519 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14871 |
vulnerable | 2026-06-08 05:12:56.326490 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.