CVE-2019-14697

musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-08-06

Last modified

2024-08-05

Weaknesses

CWE-787

Affected products

• Musl (Musl-libc)

References

• http://www.openwall.com/lists/oss-security/2019/08/06/4
• https://security.gentoo.org/glsa/202003-13
• https://www.openwall.com/lists/musl/2019/08/06/1