{"id":"CVE-2021-34141","aliases":["CLSA-2025-1760400833","CLSA-2026-1781139192","CLSA-2026-1789381947","CLSA-2026-1793175147","CLSA-2026-1793175390","CLSA-2026-1793694087","CLSA-2026-1793694742","CLSA-2026-1793700288","DEBIAN-CVE-2021-34141","EUVD-2021-0151","GHSA-fpfv-jqm9-f5jm","OESA-2022-1522","PYSEC-2021-855","TUXVUL-2026-10001","TUXVUL-2026-10002","TUXVUL-2026-10003","TUXVUL-2026-10004","TUXVUL-2026-10005","TUXVUL-2026-10006","TUXVUL-2026-10007","TUXVUL-2026-10008","UBUNTU-CVE-2021-34141","USN-5763-1"],"status":"published","title":"Incorrect Comparison in NumPy","description":"An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is \"completely harmless.\"","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01679,"percentile":0.77103,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-697"],"published":"2021-12-17T18:43:17Z","modified":"2026-11-03T13:30:03Z","fixes":[{"ecosystem":"PyPI","package":"numpy","fixed_in":["1.22","1.10.0"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:PyPI","package":"numpy","fixed_in":["1.15.4.post2+tuxcare","1.21.0.post1+tuxcare","2.1.3.post1+tuxcare","2.0.2.post1+tuxcare","2.2.6.post1+tuxcare","1.26.4.post1+tuxcare"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"numpy","fixed_in":["1:1.17.4-5ubuntu3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"numpy","fixed_in":["1:1.21.5-1ubuntu22.04.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22"}]}]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.15.4"},{"fixed":"1.15.4.post2+tuxcare"}]}],"versions":["1.15.4","1.15.4.post1+tuxcare"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.21.0"},{"fixed":"1.21.0.post1+tuxcare"}]}],"versions":["1.21.0"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.0.post3+tuxcare"}]}],"versions":["1.16.0","1.16.0.post1+tuxcare","1.16.0.post2+tuxcare"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.3"},{"fixed":"2.1.3.post1+tuxcare"}]}],"versions":["2.1.3"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.2"},{"fixed":"2.0.2.post1+tuxcare"}]}],"versions":["2.0.2"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.6"},{"fixed":"2.2.6.post1+tuxcare"}]}],"versions":["2.2.6"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.26.4"},{"fixed":"1.26.4.post1+tuxcare"}]}],"versions":["1.26.4"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.21.6"},{"fixed":"1.21.6.post1+tuxcare"}]}],"versions":["1.21.6"],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.24.2-1","1:1.24.2-1+deb12u1","1:1.24.2-2","1:1.24.2-2+hurd.1","1:1.24.2-3","1:1.26.3-1","1:1.26.3-2","1:1.26.4+ds-1","1:1.26.4+ds-10","1:1.26.4+ds-11","1:1.26.4+ds-12","1:1.26.4+ds-13","1:1.26.4+ds-2","1:1.26.4+ds-3","1:1.26.4+ds-4","1:1.26.4+ds-5","1:1.26.4+ds-6","1:1.26.4+ds-7","1:1.26.4+ds-8","1:1.26.4+ds-9","1:1.26.4+ds-9~exp1","1:2.1.0+ds-1","1:2.1.0+ds-2","1:2.1.1+ds-1","1:2.1.1+ds-2","1:2.1.1+ds-3","1:2.1.2+ds-1","1:2.1.3+ds-1","1:2.1.3+ds-2","1:2.2.0+ds-1","1:2.2.1+ds-1","1:2.2.1+ds-2","1:2.2.2+ds-1","1:2.2.2+ds-2","1:2.2.3+ds-1","1:2.2.3+ds-2","1:2.2.3+ds-3","1:2.2.3+ds-4","1:2.2.3+ds-5","1:2.2.4+ds-1","1:2.2.4+ds-1.1","1:2.2.4+ds-1.2","1:2.3.2+ds-1","1:2.3.3+ds-1","1:2.3.3+ds-2","1:2.3.3+ds-3","1:2.3.4+ds-1","1:2.3.4+ds-2","1:2.3.4+ds-3","1:2.3.5+ds-1","1:2.3.5+ds-2","1:2.3.5+ds-3","1:2.4.1+ds-1","1:2.4.2+ds-1","1:2.4.3+ds-1","1:2.4.4+ds-1","1:2.4.4+ds-2","1:2.4.6+ds-1","1:2.4.6+ds-2","1:2.4.6+ds-3","1:2.4.6+ds-4","1:2.4.6+ds-5"]},{"source":"osv","ecosystem":"Debian:13","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.2.4+ds-1","1:2.2.4+ds-1.1","1:2.2.4+ds-1.2","1:2.3.2+ds-1","1:2.3.3+ds-1","1:2.3.3+ds-2","1:2.3.3+ds-3","1:2.3.4+ds-1","1:2.3.4+ds-2","1:2.3.4+ds-3","1:2.3.5+ds-1","1:2.3.5+ds-2","1:2.3.5+ds-3","1:2.4.1+ds-1","1:2.4.2+ds-1","1:2.4.3+ds-1","1:2.4.4+ds-1","1:2.4.4+ds-2","1:2.4.6+ds-1","1:2.4.6+ds-2","1:2.4.6+ds-3","1:2.4.6+ds-4","1:2.4.6+ds-5"]},{"source":"osv","ecosystem":"Debian:14","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.2.4+ds-1","1:2.2.4+ds-1.1","1:2.2.4+ds-1.2","1:2.3.2+ds-1","1:2.3.3+ds-1","1:2.3.3+ds-2","1:2.3.3+ds-3","1:2.3.4+ds-1","1:2.3.4+ds-2","1:2.3.4+ds-3","1:2.3.5+ds-1","1:2.3.5+ds-2","1:2.3.5+ds-3","1:2.4.1+ds-1","1:2.4.2+ds-1","1:2.4.3+ds-1","1:2.4.4+ds-1","1:2.4.4+ds-2","1:2.4.6+ds-1","1:2.4.6+ds-2","1:2.4.6+ds-3","1:2.4.6+ds-4","1:2.4.6+ds-5"]},{"source":"osv","ecosystem":"PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22"}]}],"versions":["0.9.6","0.9.8","1.0","1.0.3","1.0.4","1.0b1","1.0b4","1.0b5","1.0rc1","1.0rc2","1.0rc3","1.1.1","1.10.0","1.10.1","1.10.2","1.10.3","1.10.4","1.11.0","1.11.1","1.11.2","1.11.3","1.12.0","1.12.1","1.13.0","1.13.1","1.13.3","1.14.0","1.14.1","1.14.2","1.14.3","1.14.4","1.14.5","1.14.6","1.15.0","1.15.1","1.15.2","1.15.3","1.15.4","1.16.0","1.16.1","1.16.2","1.16.3","1.16.4","1.16.5","1.16.6","1.17.0","1.17.1","1.17.2","1.17.3","1.17.4","1.17.5","1.18.0","1.18.1","1.18.2","1.18.3","1.18.4","1.18.5","1.19.0","1.19.1","1.19.2","1.19.3","1.19.4","1.19.5","1.2.0","1.2.1","1.20.0","1.20.1","1.20.2","1.20.3","1.21.0","1.21.1","1.21.2","1.21.3","1.21.4","1.21.5","1.21.6","1.3.0","1.4.0","1.4.1","1.5.0","1.5.1","1.6.0","1.6.1","1.6.2","1.7.0","1.7.1","1.7.2","1.8.0","1.8.1","1.8.2","1.9.0","1.9.1","1.9.2","1.9.3"]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-6.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-6.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-6.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.10.0"}]}],"versions":["1.9.0","1.9.1","1.9.2","1.9.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.17.4-5ubuntu3.1"}]}],"versions":["1:1.17.3-0ubuntu2","1:1.17.4-3ubuntu1","1:1.17.4-3ubuntu2","1:1.17.4-5ubuntu2","1:1.17.4-5ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.21.5-1ubuntu22.04.1"}]}],"versions":["1:1.19.5-1ubuntu2","1:1.19.5-1ubuntu3","1:1.20.2-1ubuntu1","1:1.21.4-2","1:1.21.5-1","1:1.21.5-1build2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.17.4-5ubuntu3.1"}]}],"versions":["1:1.17.3-0ubuntu2","1:1.17.4-3ubuntu1","1:1.17.4-3ubuntu2","1:1.17.4-5ubuntu2","1:1.17.4-5ubuntu3"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.21.5-1ubuntu22.04.1"}]}],"versions":["1:1.19.5-1ubuntu2","1:1.19.5-1ubuntu3","1:1.20.2-1ubuntu1","1:1.21.4-2","1:1.21.5-1","1:1.21.5-1build2"],"bundled":4}],"products":[{"vendor":"numpy","product":"numpy"},{"vendor":"oracle","product":"communications_cloud_native_core_policy"}],"references":[{"url":"https://github.com/numpy/numpy/issues/18993","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-34141","tags":["advisory"]},{"url":"https://github.com/numpy/numpy/issues/18993#issuecomment-1010735102","tags":["web"]},{"url":"https://github.com/advisories/GHSA-fpfv-jqm9-f5jm","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/numpy/PYSEC-2021-855.yaml","tags":["web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-34141","tags":["advisory"]},{"url":"https://github.com/numpy/numpy","tags":["package"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1522","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41495","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-34141","tags":["report"]},{"url":"https://github.com/numpy/numpy/commit/eeef9d4646103c3b1afd3085f1393f2b3f9575b2","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5763-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-34141","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-33430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-41495","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-41496","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-34141","description":"An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is \"completely harmless.\"","status":"published","published":"2021-12-17T18:43:17Z","modified":"2026-10-08T21:03:14.497Z","updated_at":"2026-11-02T14:33:11.244759Z"}],"euvd":[{"id":"EUVD-2021-0151","description":"An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is \"completely harmless.\"","status":"published","published":"2021-12-17T18:43:17Z","modified":"2026-10-08T21:03:14Z","updated_at":"2026-11-02T17:27:27.240961Z"}],"ghsa":[{"id":"GHSA-fpfv-jqm9-f5jm","title":"Incorrect Comparison in NumPy","description":"Incomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects.","status":"published","published":"2021-12-18T00:00:41Z","modified":"2023-01-27T05:07:10Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-697"],"updated_at":"2026-11-02T14:36:21.8171Z"}],"nvd":[{"id":"CVE-2021-34141","description":"An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is \"completely harmless.\"","status":"published","published":"2021-12-17T19:15:07.543Z","modified":"2026-10-08T21:17:35.733Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-697"],"updated_at":"2026-11-02T14:07:02.566991Z"}],"osv":[{"id":"CVE-2021-34141","description":"An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is \"completely harmless.\"","status":"published","published":"2021-12-17T19:15:07.543Z","modified":"2026-10-20T10:54:45.289460806Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:20.13324Z"},{"id":"DEBIAN-CVE-2021-34141","description":"An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is \"completely harmless.\"","status":"published","published":"2021-12-17T19:15:07.543Z","modified":"2026-10-09T10:00:24.403258937Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"GHSA-fpfv-jqm9-f5jm","title":"Incorrect Comparison in NumPy","description":"Incomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects.","status":"published","published":"2021-12-18T00:00:41Z","modified":"2023-11-08T04:06:07.388275Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-697"],"updated_at":"2026-11-02T15:46:46.760785Z"},{"id":"OESA-2022-1522","title":"numpy security update","description":"A fast multidimensional array facility for Python.\r\n\r\nSecurity Fix(es):\r\n\r\nNull Pointer Dereference vulnerability exists in numpy.sort in NumPy \u0026amp;lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays.(CVE-2021-41495)\r\n\r\nAn incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is \u0026quot;completely harmless.\u0026quot;(CVE-2021-34141)","status":"published","published":"2022-02-11T11:04:48Z","modified":"2026-08-18T01:15:39.028280974Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2021-34141","description":"An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is \"completely harmless.\"","status":"published","published":"2021-12-17T19:15:00Z","modified":"2026-02-04T02:45:20.302112Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:54:27.870979Z"},{"id":"CLSA-2025-1760400833","title":"TuxCare security update for numpy (1 CVE)","description":"TuxCare rebuilt numpy to address 1 CVE. Fixed in 1.15.4.post2+tuxcare.","status":"published","published":"2026-08-04T14:52:11Z","modified":"2026-10-20T13:45:22.680638035Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2026-1781139192","title":"TuxCare security update for numpy (1 CVE)","description":"TuxCare rebuilt numpy to address 1 CVE. Fixed in 1.21.0.post1+tuxcare.","status":"published","published":"2026-08-04T14:52:36Z","modified":"2026-10-15T09:48:00.982559897Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1789381947","title":"TuxCare security update for numpy (2 CVEs)","description":"TuxCare rebuilt numpy to address 2 CVEs. Fixed in 1.16.0.post3+tuxcare.","status":"published","published":"2026-09-14T10:32:27Z","modified":"2026-10-15T09:48:01.742067297Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1793175147","title":"TuxCare security update for numpy (8 CVEs)","description":"TuxCare rebuilt numpy to address 8 CVEs. Fixed in 2.1.3.post1+tuxcare.","status":"published","published":"2026-10-28T08:12:27Z","modified":"2026-10-28T13:45:02.692353703Z","updated_at":"2026-11-02T15:43:55.34846Z"},{"id":"CLSA-2026-1793175390","title":"TuxCare security update for numpy (8 CVEs)","description":"TuxCare rebuilt numpy to address 8 CVEs. Fixed in 2.0.2.post1+tuxcare.","status":"published","published":"2026-10-28T08:16:30Z","modified":"2026-10-28T13:45:02.68137776Z","updated_at":"2026-11-02T15:43:55.34846Z"},{"id":"CLSA-2026-1793694087","title":"TuxCare security update for numpy (7 CVEs)","description":"TuxCare rebuilt numpy to address 7 CVEs. Fixed in 2.2.6.post1+tuxcare.","status":"published","published":"2026-11-03T09:21:28Z","modified":"2026-11-03T13:30:03.168418747Z","updated_at":"2026-11-03T14:04:50.729288Z"},{"id":"CLSA-2026-1793694742","title":"TuxCare security update for numpy (5 CVEs)","description":"TuxCare rebuilt numpy to address 5 CVEs. Fixed in 1.26.4.post1+tuxcare.","status":"published","published":"2026-11-03T09:32:23Z","modified":"2026-11-03T13:30:02.620682923Z","updated_at":"2026-11-03T14:04:50.729288Z"},{"id":"CLSA-2026-1793700288","title":"TuxCare security update for numpy (7 CVEs)","description":"TuxCare rebuilt numpy to address 7 CVEs. Fixed in 1.21.6.post1+tuxcare.","status":"published","published":"2026-11-03T11:04:49Z","modified":"2026-11-03T13:30:03.170920694Z","updated_at":"2026-11-03T14:04:50.729288Z"},{"id":"PYSEC-2021-855","description":"Incomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects.","status":"published","published":"2021-12-17T19:15:00Z","modified":"2023-11-08T04:06:07.388275Z","updated_at":"2026-11-02T15:52:53.119977Z"},{"id":"USN-5763-1","title":"numpy vulnerabilities","description":"It was discovered that NumPy did not properly manage memory when specifying\narrays of large dimensions. If a user were tricked into running malicious\nPython file, an attacker could cause a denial of service. This issue only\naffected Ubuntu 20.04 LTS. (CVE-2021-33430)\n\nIt was discovered that NumPy did not properly perform string comparison\noperations under certain circumstances. An attacker could possibly use\nthis issue to cause NumPy to crash, resulting in a denial of service.\n(CVE-2021-34141)\n\nIt was discovered that NumPy did not properly manage memory under certain\ncircumstances. An attacker could possibly use this issue to cause NumPy to\ncrash, resulting in a denial of service. (CVE-2021-41495, CVE-2021-41496)\n","status":"published","published":"2022-12-07T05:01:48Z","modified":"2026-02-10T04:42:52Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}