PYSEC-2021-854
At a glance
- Published
- Updated
- CVE
- CVE-2021-33430
- Aliases
- GHSA-6p56-wp2h-9hxr
Description
A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a malicious user cause a Denial of Service.
Affected packages
| Package | Versions |
|---|---|
| PyPI · numpy | introduced 1.9.0, fixed 1.10.0 |
References
- https://github.com/numpy/numpy/issues/18939 REPORT
- https://github.com/advisories/GHSA-6p56-wp2h-9hxr ADVISORY
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — PyPA Advisory Database |