CVE 2019-14872
The _dtoa_r function of the newlib libc library, prior to version 3.3.0, performs multiple memory allocations without checking their return value. This could result in NULL pointer dereference.
See the
CVE page on Mitre.org
for more details.