Skip to content

Vendor

numpy vulnerabilities

4 published CVES affecting numpy, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
4
Critical
0
High
1
Medium
3
Low
0
Unscored
0
CISA KEV
0
Atom feed of numpy alerts

Products

Latest numpy CVEs

Newest publication first

  1. CVE-2021-34141 Incorrect Comparison in NumPy

    Published
    MediumCVSS 5.3 EPSS 1.7%

    An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."

  3. CVE-2014-1859 Numpy arbitrary file write via symlink attack

    Published
    MediumCVSS 5.5 EPSS 0.47%

    (1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3) f2py/f2py2e.py, and (4) lib/tests/test_io.py in NumPy before 1.8.1 allow local users to write to arbitrary files via a symlink attack on a temporary file.

  4. CVE-2017-12852 Numpy missing input validation

    Published
    HighCVSS 7.5 EPSS 2.7% PoC

    The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.