musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code.

References

• https://nvd.nist.gov/vuln/detail/CVE-2019-14697
• https://security.gentoo.org/glsa/202003-13
• https://www.openwall.com/lists/musl/2019/08/06/1
• http://www.openwall.com/lists/oss-security/2019/08/06/4