CVE-2014-9474

Critical

Published: 10/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Buffer overflow in the mpfr_strtofr function in GNU MPFR before version 3.1.2-p11 may allow context-dependent attackers to achieve unspecified impact via vectors related to incorrect documentation for mpn_set_str.

Risk Assessment

This vulnerability could lead to unauthorized access or execution of malicious code, posing a serious threat to system integrity.

Recommendation

It is recommended to upgrade to GNU MPFR version 3.1.2-p11 or later to mitigate this vulnerability.

Original NVD description (English source)

Buffer overflow in the mpfr_strtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to incorrect documentation for mpn_set_str.