A flaw was found in newlib in versions prior to 4.0.0. Improper overflow validation in the memory allocation functions mEMALIGn, pvALLOc, nanomemalign, nanovalloc, nano_pvalloc could case an integer overflow, leading to an allocation of a small buffer and then to a heap-based buffer overflow.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "4.4.0.20231231-2", "binary_name": "libnewlib-arm-none-eabi" }, { "binary_version": "4.4.0.20231231-2", "binary_name": "libnewlib-dev" }, { "binary_version": "4.4.0.20231231-2", "binary_name": "libnewlib-doc" }, { "binary_version": "4.4.0.20231231-2", "binary_name": "newlib-source" } ] }