TI-2019-04516 CVE-2019-6446 · GHSA-9fq2-x9r6-wfmf
An issue was discovered in NumPy before 1.16.3.
Priority MEDIUM 64
An issue was discovered in NumPy before 1.16.3.
Numpy
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Numpy records in CISA KEVNo Numpy vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records in Numpy · all components
TI-2017-09516 CVE-2017-12852 · GHSA-frgw-fgh6-9g52
The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation.
Priority LOW 38
The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation.
TI-2021-13284 CVE-2021-34141 · GHSA-fpfv-jqm9-f5jm
An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows…
Priority LOW 33
An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects.
TI-2021-18253 CVE-2021-41495 · GHSA-5545-2q6w-2gh6
Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the…
Priority LOW 27
Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively cre…
TI-2021-12844 CVE-2021-33430 · GHSA-6p56-wp2h-9hxr
A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int…
Priority LOW 27
A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a malicious user cause a De…
TI-2021-18254 CVE-2021-41496 · GHSA-f7c7-j99h-c22f
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19…
Priority LOW 25
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values.
TI-2014-01452 CVE-2014-1859 · GHSA-2fc2-6r4j-p65h
(1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3) f2py/f2py2e.py, and…
Priority LOW 25
(1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3) f2py/f2py2e.py, and (4) lib/tests/test_io.py in NumPy before 1.8.1 allow local users to write to arbitrary files via a symlink attack on a temporary f…
TI-2014-01451 CVE-2014-1858 · GHSA-cw6w-4rcx-xphc
__init__.py in f2py in NumPy before 1.8.1 allows local users to write to arbitrary files…
Priority LOW 25
__init__.py in f2py in NumPy before 1.8.1 allows local users to write to arbitrary files via a symlink attack on a temporary file.