Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

numpy

8 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
8
Registry
PyPI

Advisories 8

  • Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service…

    Affected: fixed in 1.19.0; fixed in 1.19.

  • Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing…

    Affected: fixed in 1.19.1; fixed in 1.19.

  • An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by

    Affected: fixed in 1.22; from 1.9.0, fixed in 1.10.0.

  • A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large…

    Affected: from 1.9.0, fixed in 1.10.0; from 1.9.0, fixed in 1.21.

  • An issue was discovered in NumPy before 1.16.3.

    Affected: fixed in 1.16.1; fixed in 1.16.3.

  • (1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3) f2py/f2py2e.py, and (4) lib/tests/test_io.py in NumPy before 1.8.1…

    Affected: fixed in 1.8.1.

  • init.py in f2py in NumPy before 1.8.1 allows local users to write to arbitrary files via a symlink attack on a temporary file.

    Affected: fixed in 1.8.1.

  • The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation.

    Affected: fixed in 1.13.3; fixed in 1.13.3.