Launchpad.net

CVE 2014-9474

Buffer overflow in the mpfr_strtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to incorrect documentation for mpn_set_str.

See the CVE page on Mitre.org for more details.