PyPI/arrayfire CVE-2018-20998: critical 9.8, EPSS 1.66%

Potential memory corruption in arrayfire

Action: Upgrade arrayfire to 3.6.0 or later.

pip install arrayfire==3.6.0

Affected

Fixed versions

Sources

• osv: GHSA-69fv-gw6g-8ccg#PyPI/arrayfire
• https://nvd.nist.gov/vuln/detail/CVE-2018-20998
• https://github.com/arrayfire/arrayfire-rust/pull/177
• https://github.com/arrayfire/arrayfire-rust/commit/a5256f3e5e23b83eaad69699e0b04653aba04fb8
• https://github.com/arrayfire/arrayfire-rust
• https://github.com/pypa/advisory-database/tree/main/vulns/arrayfire/PYSEC-2019-144.yaml
• https://rustsec.org/advisories/RUSTSEC-2018-0011.html

CVE-2018-20998 · published 2021-08-25T20:43:26Z · modified 2024-09-12T20:52:04.541612Z · JSON