GHSA-9jx5-6pgf-crrp
Withdrawn: scipy memory leak vulnerability
Withdrawn ·
At a glance
- Published
- Updated
- CVE
- CVE-2023-25399
- Aliases
- PYSEC-2023-102
- CVSS_V3
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
## Withdrawn Advisory This advisory has been withdrawn because it has been found to not be an issue. Please see the issue [here](https://github.com/scipy/scipy/issues/16235#issuecomment-1625361328) for more information. ## Original Description A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in `Py_FindObjects()` function.
Affected packages
| Package | Versions |
|---|---|
| PyPI · scipy | introduced 0, fixed 1.10.0 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2023-25399 ADVISORY
- https://github.com/scipy/scipy/issues/16235 WEB
- https://github.com/scipy/scipy/issues/16235#issuecomment-1625361328 WEB
- https://github.com/scipy/scipy/pull/16397 WEB
- https://github.com/scipy/scipy/commit/9b6521198c4f31d3f9cb525e581bea8e3e77f0a2 WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/scipy/PYSEC-2023-102.yaml WEB
- https://github.com/scipy/scipy PACKAGE
- http://www.square16.org/achievement/cve-2023-25399 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |