Uploaded image for project: 'Beam'
  1. Beam
  2. BEAM-14025

CVE-2021-41496 vulnerability in numpy library

Details

    Description

      https://cve.report/CVE-2021-41496

      Potential buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally).

      Fix: As a fix, the current numpy library version needs to be upgraded to 1.22.x

      Attachments

        Activity

          People

            Unassigned Unassigned
            mohinuddin Mohinuddin
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: