medium5.5
CVE-2021-41496
Buffer Copy without Checking Size of Input in NumPy
Impact
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | numpy | <= 1.18.5 | 1.19 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Numpy | Numpy | before 1.19.0 |