PyPI/numpy CVE-2021-41496: medium 5.5, EPSS 0.40%

Buffer Copy without Checking Size of Input in NumPy

Action: Upgrade numpy to 1.19 or later.

pip install numpy==1.19

Affected

Fixed versions

Sources

• osv: GHSA-f7c7-j99h-c22f
• https://nvd.nist.gov/vuln/detail/CVE-2021-41496
• https://github.com/numpy/numpy/issues/19000
• https://github.com/numpy/numpy
• https://www.oracle.com/security-alerts/cpujul2022.html

CVE-2021-41496 · published 2022-02-08T00:00:56Z · modified 2023-11-08T04:06:59.274139Z · JSON