newlib project records

10 published records for vendor newlib project.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

10 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2021-3420No exploit	A flaw was found in newlib in versions prior to 4.0.0.newlib project · newlib · CWE-190 Pre-auth Memory safety	Critical9.8	—	2.1%	Mar 5, 2021
39Monitor	CVE-2024-30949No exploit	An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.newlib project · newlib · CWE-190 pre-auth RCE Memory safety	Critical9.8	—	0.7%	Aug 20, 2024
26Monitor	CVE-2019-14876No exploit	In the __lshift function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocatnewlib project · newlib · CWE-476 Memory safety Denial of service	Medium6.5	—	1.4%	Mar 19, 2020
26Monitor	CVE-2019-14874No exploit	In the __i2b function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate anewlib project · newlib · CWE-476 Memory safety Denial of service	Medium6.5	—	1.4%	Mar 19, 2020
26Monitor	CVE-2019-14873No exploit	In the __multadd function of the newlib libc library, prior to versions 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate anewlib project · newlib · CWE-476 Memory safety Denial of service	Medium6.5	—	1.4%	Mar 19, 2020
26Monitor	CVE-2019-14872No exploit	The _dtoa_r function of the newlib libc library, prior to version 3.3.0, performs multiple memory allocations without checking their return newlib project · newlib · CWE-476 Memory safety Denial of service	Medium6.5	—	1.4%	Mar 19, 2020
26Monitor	CVE-2019-14878No exploit	In the __d2b function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate anewlib project · newlib · CWE-476 Memory safety Denial of service	Medium6.5	—	1.3%	Mar 19, 2020
26Monitor	CVE-2019-14877No exploit	In the __mdiff function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocatenewlib project · newlib · CWE-476 Memory safety Denial of service	Medium6.5	—	1.2%	Mar 19, 2020
26Monitor	CVE-2019-14875No exploit	In the __multiply function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocnewlib project · newlib · CWE-476 Memory safety Denial of service	Medium6.5	—	1.2%	Mar 19, 2020
26Monitor	CVE-2019-14871No exploit	The REENT_CHECK macro (see newlib/libc/include/sys/reent.h) as used by REENT_CHECK_TM, REENT_CHECK_MISC, REENT_CHECK_MP and other newlib macnewlib project · newlib · CWE-476 Memory safety Denial of service	Medium6.5	—	1.0%	Mar 18, 2020

CVE-2021-3420
40Plan
A flaw was found in newlib in versions prior to 4.0.0.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Memory safety
newlib project · newlibMar 5, 2021
CVE-2024-30949
39Monitor
An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
newlib project · newlibAug 20, 2024
CVE-2019-14876
26Monitor
In the __lshift function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocat
MediumCVSS 6.5No exploitEPSS 1%
- Memory safety
- Denial of service
newlib project · newlibMar 19, 2020
CVE-2019-14874
26Monitor
In the __i2b function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a
MediumCVSS 6.5No exploitEPSS 1%
- Memory safety
- Denial of service
newlib project · newlibMar 19, 2020
CVE-2019-14873
26Monitor
In the __multadd function of the newlib libc library, prior to versions 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a
MediumCVSS 6.5No exploitEPSS 1%
- Memory safety
- Denial of service
newlib project · newlibMar 19, 2020
CVE-2019-14872
26Monitor
The _dtoa_r function of the newlib libc library, prior to version 3.3.0, performs multiple memory allocations without checking their return
MediumCVSS 6.5No exploitEPSS 1%
- Memory safety
- Denial of service
newlib project · newlibMar 19, 2020
CVE-2019-14878
26Monitor
In the __d2b function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a
MediumCVSS 6.5No exploitEPSS 1%
- Memory safety
- Denial of service
newlib project · newlibMar 19, 2020
CVE-2019-14877
26Monitor
In the __mdiff function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate
MediumCVSS 6.5No exploitEPSS 1%
- Memory safety
- Denial of service
newlib project · newlibMar 19, 2020
CVE-2019-14875
26Monitor
In the __multiply function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to alloc
MediumCVSS 6.5No exploitEPSS 1%
- Memory safety
- Denial of service
newlib project · newlibMar 19, 2020
CVE-2019-14871
26Monitor
The REENT_CHECK macro (see newlib/libc/include/sys/reent.h) as used by REENT_CHECK_TM, REENT_CHECK_MISC, REENT_CHECK_MP and other newlib mac
MediumCVSS 6.5No exploitEPSS 1%
- Memory safety
- Denial of service
newlib project · newlibMar 18, 2020