CVE-2019-14874

CVE-2019-14874 describes a null pointer dereference vulnerability in the newlib libc library, specifically within the i2b function of versions prior to 3.3.0. This flaw occurs because the Balloc function, used for big integer allocation, lacks a check for successful memory allocation, leading to a crash if allocation fails. Rated 6.5 Medium, this vulnerability can be exploited remotely with low attack complexity and privileges, resulting in high availability impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.