CVE-2014-9474: Mpfr GNU Mpfr

Critical severity, CVSS 9.8. EPSS: 4.5% chance of exploitation in the next 30 days.

Buffer overflow in the mpfr_strtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to incorrect documentation for mpn_set_str.

Affected products

• Mpfr GNU Mpfr: up to and including 3.1.2

Published 2017-10-10. Last modified 2026-06-17.