Skip to main content

Newlib

2 CVEs product

Monthly

CVE-2024-30949 CRITICAL PATCH Act Now

An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Integer Overflow vulnerability could allow attackers to cause unexpected behavior through arithmetic overflow.

Integer Overflow RCE Newlib
NVD GitHub
CVSS 3.1
9.8
EPSS
0.8%
CVE-2021-3420 CRITICAL PATCH Act Now

A flaw was found in newlib in versions prior to 4.0.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Integer Overflow vulnerability could allow attackers to cause unexpected behavior through arithmetic overflow.

Buffer Overflow Integer Overflow Newlib Fedora
NVD
CVSS 3.1
9.8
EPSS
2.1%
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Integer Overflow vulnerability could allow attackers to cause unexpected behavior through arithmetic overflow.

Integer Overflow RCE Newlib
NVD GitHub
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

A flaw was found in newlib in versions prior to 4.0.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Integer Overflow vulnerability could allow attackers to cause unexpected behavior through arithmetic overflow.

Buffer Overflow Integer Overflow Newlib +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy