CVE-2019-14874: 
NixOS vulnerability analysis and mitigation

CVE-2019-14874 affects the newlib libc library versions prior to 3.3.0, specifically in the __i2b function. The vulnerability was discovered during a security assessment and involves a null pointer dereference bug that occurs when memory allocation fails (Census Labs).

The vulnerability exists in the __i2b function within newlib/libc/stdlib/mprec.c. The issue occurs when the Balloc function is used to allocate a big integer, but no verification is performed to check if the allocation succeeded. When memory allocation fails, attempting to access _x[0] triggers a null pointer dereference (Census Labs).

When exploited, this vulnerability can cause the processor to read or write bytes at an offset from the 0x0 memory address. On embedded processors where the Device Vector Table is mapped at address 0x0, this could lead to leaking interrupt handler addresses, overwriting interrupt handlers, or potentially executing unintended code (Census Labs).

Users are advised to update to newlib version 3.3.0 or later, which includes patches addressing this vulnerability. Additionally, when building the library, it's recommended to enable the newlib-reent-check-verify 'configure' option (Census Labs).