PYSEC-2021-857
At a glance
- Published
- Updated
- CVE
- CVE-2021-41496
- Aliases
- GHSA-f7c7-j99h-c22f
Description
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values.
Affected packages
| Package | Versions |
|---|---|
| PyPI · numpy | introduced 0, fixed 1.19.0 |
References
- https://github.com/numpy/numpy/issues/19000 REPORT
- https://github.com/advisories/GHSA-f7c7-j99h-c22f ADVISORY
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — PyPA Advisory Database |