CVE-2021-41496
Buffer Copy without Checking Size of Input in NumPy
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)
- Record
CVE-2021-41496- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)
- Record
CVE-2021-41496- Updated
- 2026-11-02
EUVDEUVD-2021-0153 No score
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)
- Record
EUVD-2021-0153- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f7c7-j99h-c22f
Buffer Copy without Checking Size of Input in NumPy
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values.
- Record
GHSA-f7c7-j99h-c22f- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
OSVAZL-7056
CVE-2021-41496 affecting package numpy for versions less than 1.22.0-1
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)
- Record
AZL-7056- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)
- Record
CVE-2021-41496- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 29 moreShow less
OSVDEBIAN-CVE-2021-41496
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)
- Record
DEBIAN-CVE-2021-41496- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVGHSA-f7c7-j99h-c22f
Buffer Copy without Checking Size of Input in NumPy
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values.
- Record
GHSA-f7c7-j99h-c22f- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
OSVOESA-2022-1485
numpy security update
A fast multidimensional array facility for Python.
Security Fix(es):
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values.(CVE-2021-41496)
- Record
OESA-2022-1485- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:0987
Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (numpy) security update
- Record
RHSA-2022:0987- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:1000
Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (numpy) security update
- Record
RHSA-2022:1000- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-41496
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)
- Record
UBUNTU-CVE-2021-41496- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2025-1766621635 No score
TuxCare security update for numpy (1 CVE)
TuxCare rebuilt numpy to address 1 CVE. Fixed in 1.16.0.post2+tuxcare.
- Record
CLSA-2025-1766621635- Updated
- 2026-11-02
OSVCLSA-2026-1791368060 No score
TuxCare security update for numpy (1 CVE)
TuxCare rebuilt numpy to address 1 CVE. Fixed in 1.15.4.post5+tuxcare.
- Record
CLSA-2026-1791368060- Updated
- 2026-11-02
OSVCLSA-2026-1793175147 No score
TuxCare security update for numpy (8 CVEs)
TuxCare rebuilt numpy to address 8 CVEs. Fixed in 2.1.3.post1+tuxcare.
- Record
CLSA-2026-1793175147- Updated
- 2026-11-02
OSVCLSA-2026-1793175390 No score
TuxCare security update for numpy (8 CVEs)
TuxCare rebuilt numpy to address 8 CVEs. Fixed in 2.0.2.post1+tuxcare.
- Record
CLSA-2026-1793175390- Updated
- 2026-11-02
OSVCLSA-2026-1793694087 No score
TuxCare security update for numpy (7 CVEs)
TuxCare rebuilt numpy to address 7 CVEs. Fixed in 2.2.6.post1+tuxcare.
- Record
CLSA-2026-1793694087- Updated
- 2026-11-03
OSVCLSA-2026-1793694742 No score
TuxCare security update for numpy (5 CVEs)
TuxCare rebuilt numpy to address 5 CVEs. Fixed in 1.26.4.post1+tuxcare.
- Record
CLSA-2026-1793694742- Updated
- 2026-11-03
OSVCLSA-2026-1793700288 No score
TuxCare security update for numpy (7 CVEs)
TuxCare rebuilt numpy to address 7 CVEs. Fixed in 1.21.6.post1+tuxcare.
- Record
CLSA-2026-1793700288- Updated
- 2026-11-03
OSVMGASA-2022-0032 No score
Updated python-numpy packages fix security vulnerability
Buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913). (CVE-2021-33430) Buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907). (CVE-2021-41496)
- Record
MGASA-2022-0032- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:0134-1 No score
Security update for python-numpy
This update for python-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- Record
openSUSE-SU-2022:0134-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:1064-1 No score
Security update for python2-numpy
This update for python2-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort due to missing return value validation (bsc#1193911).
- Record
openSUSE-SU-2022:1064-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13220-1 No score
python310-numpy-1.25.2-2.1 on GA media
These are all security issues fixed in the python310-numpy-1.25.2-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13220-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14311-1 No score
python310-numpy1-1.26.4-1.1 on GA media
These are all security issues fixed in the python310-numpy1-1.26.4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14311-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11371-1 No score
python313-numpy-2.4.6-1.1 on GA media
These are all security issues fixed in the python313-numpy-2.4.6-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11371-1- Updated
- 2026-11-02
OSVPYSEC-2021-857 No score
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values.
- Record
PYSEC-2021-857- Updated
- 2026-11-02
OSVSUSE-SU-2022:0118-1 No score
Security update for python-numpy
This update for python-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- Record
SUSE-SU-2022:0118-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0134-1 No score
Security update for python-numpy
This update for python-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- Record
SUSE-SU-2022:0134-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0134-2 No score
Security update for python-numpy
This update for python-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- Record
SUSE-SU-2022:0134-2- Updated
- 2026-11-02
OSVSUSE-SU-2022:0134-3 No score
Security update for python-numpy
This update for python-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- Record
SUSE-SU-2022:0134-3- Updated
- 2026-11-02
OSVSUSE-SU-2022:0206-1 No score
Security update for python-numpy
This update for python-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- Record
SUSE-SU-2022:0206-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1064-1 No score
Security update for python2-numpy
This update for python2-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort due to missing return value validation (bsc#1193911).
- Record
SUSE-SU-2022:1064-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1064-2 No score
Security update for python2-numpy
This update for python2-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort due to missing return value validation (bsc#1193911).
- Record
SUSE-SU-2022:1064-2- Updated
- 2026-11-02
OSVSUSE-SU-2022:2441-1 No score
Security update for python2-numpy
This update for python2-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort (bsc#1193911).
- Record
SUSE-SU-2022:2441-1- Updated
- 2026-11-02
OSVUSN-5763-1 No score
numpy vulnerabilities
It was discovered that NumPy did not properly manage memory when specifying arrays of large dimensions. If a user were tricked into running malicious Python file, an attacker could cause a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-33430)
It was discovered that NumPy did not properly perform string comparison operations under certain circumstances. An attacker could possibly use this issue to cause NumPy to crash, resulting in a denial of service. (CVE-2021-34141)
It was discovered that NumPy did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause NumPy to crash, resulting in a denial of service. (CVE-2021-41495, CVE-2021-41496)
- Record
USN-5763-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
numpyPyPI |
through 1.18.5 | 1.19 |
numpyAzure Linux:2 |
before 1.22.0-1 | 1.22.0-1 |
numpyTuxCare:PyPI |
1.16.0 up to 1.16.0.post2+tuxcare, plus listed versions 1.16.0.post1+tuxcare |
1.16.0.post2+tuxcare |
numpyTuxCare:PyPI |
1.15.4 up to 1.15.4.post5+tuxcare, plus listed versions 1.15.4.post1+tuxcare1.15.4.post2+tuxcare1.15.4.post3+tuxcare1.15.4.post4+tuxcare |
1.15.4.post5+tuxcare |
numpyTuxCare:PyPI |
2.1.3 up to 2.1.3.post1+tuxcare | 2.1.3.post1+tuxcare |
numpyTuxCare:PyPI |
2.0.2 up to 2.0.2.post1+tuxcare | 2.0.2.post1+tuxcare |
numpyTuxCare:PyPI |
2.2.6 up to 2.2.6.post1+tuxcare | 2.2.6.post1+tuxcare |
numpyTuxCare:PyPI |
1.26.4 up to 1.26.4.post1+tuxcare | 1.26.4.post1+tuxcare |
numpyTuxCare:PyPI From an advisory covering 3 CVEs |
1.21.6 up to 1.21.6.post1+tuxcare | 1.21.6.post1+tuxcare |
numpyDebian:12 |
All versions, plus listed versions 1:1.24.2-11:1.24.2-1+deb12u11:1.24.2-21:1.24.2-2+hurd.11:1.24.2-3 Show 45 moreShow less1:1.26.3-11:1.26.3-21:1.26.4+ds-11:1.26.4+ds-101:1.26.4+ds-111:1.26.4+ds-121:1.26.4+ds-131:1.26.4+ds-21:1.26.4+ds-31:1.26.4+ds-41:1.26.4+ds-51:1.26.4+ds-61:1.26.4+ds-71:1.26.4+ds-81:1.26.4+ds-91:1.26.4+ds-9~exp11:2.1.0+ds-11:2.1.0+ds-21:2.1.1+ds-11:2.1.1+ds-21:2.1.1+ds-31:2.1.2+ds-11:2.1.3+ds-11:2.1.3+ds-21:2.2.0+ds-11:2.2.1+ds-11:2.2.1+ds-21:2.2.2+ds-11:2.2.2+ds-21:2.2.3+ds-11:2.2.3+ds-21:2.2.3+ds-31:2.2.3+ds-41:2.2.3+ds-51:2.2.4+ds-11:2.2.4+ds-1.11:2.2.4+ds-1.21:2.3.2+ds-11:2.3.3+ds-11:2.3.3+ds-21:2.3.3+ds-31:2.3.4+ds-11:2.3.4+ds-21:2.3.4+ds-31:2.3.5+ds-1 |
None known |
Show 91 moreShow less
| Package | Affected | Fixed |
|---|---|---|
numpyDebian:13 |
All versions, plus listed versions 1:2.2.4+ds-11:2.2.4+ds-1.11:2.2.4+ds-1.21:2.3.2+ds-11:2.3.3+ds-1 Show 18 moreShow less1:2.3.3+ds-21:2.3.3+ds-31:2.3.4+ds-11:2.3.4+ds-21:2.3.4+ds-31:2.3.5+ds-11:2.3.5+ds-21:2.3.5+ds-31:2.4.1+ds-11:2.4.2+ds-11:2.4.3+ds-11:2.4.4+ds-11:2.4.4+ds-21:2.4.6+ds-11:2.4.6+ds-21:2.4.6+ds-31:2.4.6+ds-41:2.4.6+ds-5 |
None known |
numpyDebian:14 |
All versions, plus listed versions 1:2.2.4+ds-11:2.2.4+ds-1.11:2.2.4+ds-1.21:2.3.2+ds-11:2.3.3+ds-1 Show 18 moreShow less1:2.3.3+ds-21:2.3.3+ds-31:2.3.4+ds-11:2.3.4+ds-21:2.3.4+ds-31:2.3.5+ds-11:2.3.5+ds-21:2.3.5+ds-31:2.4.1+ds-11:2.4.2+ds-11:2.4.3+ds-11:2.4.4+ds-11:2.4.4+ds-21:2.4.6+ds-11:2.4.6+ds-21:2.4.6+ds-31:2.4.6+ds-41:2.4.6+ds-5 |
None known |
numpyPyPI |
before 1.19, plus listed versions 0.9.60.9.81.01.0.31.0.4 Show 45 moreShow less1.0b11.0b41.0b51.0rc11.0rc21.0rc31.1.11.10.01.10.11.10.21.10.31.10.41.11.01.11.11.11.21.11.31.12.01.12.11.13.01.13.11.13.31.14.01.14.11.14.21.14.31.14.41.14.51.14.61.15.01.15.11.15.21.15.31.15.41.16.01.16.11.16.21.16.31.16.41.16.51.16.61.17.01.17.11.17.21.17.31.17.4 |
1.19 |
python-numpyMageia:8 From an advisory covering 2 CVEs |
before 1.19.4-1.1.mga8 | 1.19.4-1.1.mga8 |
numpyopenEuler:20.03-LTS-SP1 |
before 1.16.5-4.oe1 | 1.16.5-4.oe1 |
numpyopenEuler:20.03-LTS-SP2 |
before 1.16.5-4.oe1 | 1.16.5-4.oe1 |
numpyopenEuler:20.03-LTS-SP3 |
before 1.16.5-4.oe1 | 1.16.5-4.oe1 |
numpyPyPI |
before 1.19.0, plus listed versions 0.9.60.9.81.01.0.31.0.4 Show 45 moreShow less1.0b11.0b41.0b51.0rc11.0rc21.0rc31.1.11.10.01.10.11.10.21.10.31.10.41.11.01.11.11.11.21.11.31.12.01.12.11.13.01.13.0rc11.13.0rc21.13.11.13.31.14.01.14.0rc11.14.11.14.21.14.31.14.41.14.51.14.61.15.01.15.0rc11.15.0rc21.15.11.15.21.15.31.15.41.16.01.16.0rc11.16.0rc21.16.11.16.21.16.31.16.4 |
1.19.0 |
numpyRed Hat:openstack:16.1::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
numpy-debugsourceRed Hat:openstack:16.1::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
python3-numpyRed Hat:openstack:16.1::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
python3-numpy-debuginfoRed Hat:openstack:16.1::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
python3-numpy-f2pyRed Hat:openstack:16.1::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
numpyRed Hat:openstack:16.2::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
numpy-debugsourceRed Hat:openstack:16.2::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
python3-numpyRed Hat:openstack:16.2::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
python3-numpy-debuginfoRed Hat:openstack:16.2::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
python3-numpy-f2pyRed Hat:openstack:16.2::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
python-numpySUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 2 CVEs |
before 1.8.0-5.11.1 | 1.8.0-5.11.1 |
python-numpySUSE:Linux Enterprise Server 12 SP5 From an advisory covering 2 CVEs |
before 1.8.0-5.11.1 | 1.8.0-5.11.1 |
python-numpySUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 2 CVEs |
before 1.8.0-5.11.1 | 1.8.0-5.11.1 |
python-numpySUSE:Linux Enterprise Real Time 15 SP2 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_17_3-gnu-hpcSUSE:Linux Enterprise Real Time 15 SP2 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_17_3-gnu-hpcSUSE:Linux Enterprise Module for HPC 15 SP3 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_17_3-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_17_3-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_17_3-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_17_3-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_17_3-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_17_3-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise Server 15-LTSS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise Server 15 SP2-BCL From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Manager Proxy 4.1 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Manager Retail Branch Server 4.1 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Manager Server 4.1 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Enterprise Storage 6 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Enterprise Storage 7 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_13_3-gnu-hpcSUSE:Linux Enterprise Module for HPC 12 From an advisory covering 2 CVEs |
before 1.13.3-4.12.1 | 1.13.3-4.12.1 |
python-numpy_1_16_5-gnu-hpcSUSE:Linux Enterprise Module for HPC 15 SP3 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpySUSE:Linux Enterprise Module for Python 2 15 SP3 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python-numpy_1_16_5-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpySUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python-numpy_1_16_5-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpySUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpySUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpySUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpySUSE:Manager Proxy 4.1 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpySUSE:Manager Retail Branch Server 4.1 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpySUSE:Manager Server 4.1 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpySUSE:Enterprise Storage 7 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python-numpy_1_16_5-gnu-hpcopenSUSE:Leap 15.4 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python-numpy_1_16_5-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python-numpy_1_16_5-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python-numpy_1_16_5-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python-numpy_1_16_5-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Linux Enterprise Server 15-LTSS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Enterprise Storage 6 From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
numpyUbuntu:20.04:LTS |
before 1:1.17.4-5ubuntu3.1, plus listed versions 1:1.17.3-0ubuntu21:1.17.4-3ubuntu11:1.17.4-3ubuntu21:1.17.4-5ubuntu21:1.17.4-5ubuntu3 |
1:1.17.4-5ubuntu3.1 |
numpyUbuntu:22.04:LTS |
before 1:1.21.5-1ubuntu22.04.1, plus listed versions 1:1.19.5-1ubuntu21:1.19.5-1ubuntu31:1.20.2-1ubuntu11:1.21.4-21:1.21.5-11:1.21.5-1build2 |
1:1.21.5-1ubuntu22.04.1 |
numpyUbuntu:20.04:LTS From an advisory covering 4 CVEs |
before 1:1.17.4-5ubuntu3.1, plus listed versions 1:1.17.3-0ubuntu21:1.17.4-3ubuntu11:1.17.4-3ubuntu21:1.17.4-5ubuntu21:1.17.4-5ubuntu3 |
1:1.17.4-5ubuntu3.1 |
numpyUbuntu:22.04:LTS From an advisory covering 4 CVEs |
before 1:1.21.5-1ubuntu22.04.1, plus listed versions 1:1.19.5-1ubuntu21:1.19.5-1ubuntu31:1.20.2-1ubuntu11:1.21.4-21:1.21.5-11:1.21.5-1build2 |
1:1.21.5-1ubuntu22.04.1 |
dxflibSUSE:Package Hub 15 SP3 From an advisory covering 2 CVEs |
before 3.17.0-bp153.2.3.1 | 3.17.0-bp153.2.3.1 |
dxflibopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 3.17.0-bp153.2.3.1 | 3.17.0-bp153.2.3.1 |
python-numpyopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_17_3-gnu-hpcopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_16_5-gnu-hpcopenSUSE:Leap 15.3 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpyopenSUSE:Leap 15.3 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python-numpyopenSUSE:Tumbleweed From an advisory covering 3 CVEs |
before 1.25.2-2.1 | 1.25.2-2.1 |
python-numpy1openSUSE:Tumbleweed From an advisory covering 5 CVEs |
before 1.26.4-1.1 | 1.26.4-1.1 |
python-numpyopenSUSE:Tumbleweed From an advisory covering 5 CVEs |
before 2.4.6-1.1 | 2.4.6-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-41496 is a medium vulnerability (CVSS 5.5) in Numpy, published December 17, 2021. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in numpy 1.19.
References
github.com/numpy/numpy/issues/19000
oracle.com/security-alerts/cpujul2022.html
nvd.nist.gov/vuln/detail/CVE-2021-41496
security-tracker.debian.org/tracker/CVE-2021-41496
Show 40 moreShow less
advisories.mageia.org/MGASA-2022-0032.html
bugs.mageia.org/show_bug.cgi?id=29904
lists.opensuse.org/archives/list/[email protected]/thread/LQS3J3J4254A7C3LD55D7A432FZ2RFFI
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1485
access.redhat.com/errata/RHSA-2022:0987
bugzilla.redhat.com/show_bug.cgi?id=2035034
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0987.json
cve.org/CVERecord?id=CVE-2021-33430
suse.com/support/update/announcement/2022/suse-su-20220118-1
bugzilla.suse.com/1193907
ubuntu.com/security/CVE-2021-41496
Left out here: 78 versions. The JSON record has them.