{"id":"CVE-2021-41496","aliases":["AZL-7056","CLSA-2025-1766621635","CLSA-2026-1791368060","CLSA-2026-1793175147","CLSA-2026-1793175390","CLSA-2026-1793694087","CLSA-2026-1793694742","CLSA-2026-1793700288","DEBIAN-CVE-2021-41496","EUVD-2021-0153","GHSA-f7c7-j99h-c22f","MGASA-2022-0032","OESA-2022-1485","PYSEC-2021-857","RHSA-2022:0987","RHSA-2022:1000","SUSE-SU-2022:0118-1","SUSE-SU-2022:0134-1","SUSE-SU-2022:0134-2","SUSE-SU-2022:0134-3","SUSE-SU-2022:0206-1","SUSE-SU-2022:1064-1","SUSE-SU-2022:1064-2","SUSE-SU-2022:2441-1","TUXVUL-2026-10001","TUXVUL-2026-10002","TUXVUL-2026-10003","TUXVUL-2026-10004","TUXVUL-2026-10005","TUXVUL-2026-10006","TUXVUL-2026-10007","TUXVUL-2026-10008","UBUNTU-CVE-2021-41496","USN-5763-1","openSUSE-SU-2022:0134-1","openSUSE-SU-2022:1064-1","openSUSE-SU-2024:13220-1","openSUSE-SU-2024:14311-1","openSUSE-SU-2026:11371-1"],"status":"disputed","title":"Buffer Copy without Checking Size of Input in NumPy","description":"Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy \u003c 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00396,"percentile":0.34223,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2021-12-17T19:56:35Z","modified":"2026-11-03T13:30:03Z","fixes":[{"ecosystem":"PyPI","package":"numpy","fixed_in":["1.19","1.19.0"],"sources":["ghsa","osv"]},{"ecosystem":"Azure Linux:2","package":"numpy","fixed_in":["1.22.0-1"],"sources":["osv"]},{"ecosystem":"TuxCare:PyPI","package":"numpy","fixed_in":["1.16.0.post2+tuxcare","1.15.4.post5+tuxcare","2.1.3.post1+tuxcare","2.0.2.post1+tuxcare","2.2.6.post1+tuxcare","1.26.4.post1+tuxcare"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"numpy","fixed_in":["1.16.5-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"numpy","fixed_in":["1.16.5-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"numpy","fixed_in":["1.16.5-4.oe1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"numpy","fixed_in":["1:1.17.4-5ubuntu3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"numpy","fixed_in":["1:1.21.5-1ubuntu22.04.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.18.5"},{"fixed":"1.19"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.0-1"}]}]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.0.post2+tuxcare"}]}],"versions":["1.16.0","1.16.0.post1+tuxcare"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.15.4"},{"fixed":"1.15.4.post5+tuxcare"}]}],"versions":["1.15.4","1.15.4.post1+tuxcare","1.15.4.post2+tuxcare","1.15.4.post3+tuxcare","1.15.4.post4+tuxcare"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.3"},{"fixed":"2.1.3.post1+tuxcare"}]}],"versions":["2.1.3"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.2"},{"fixed":"2.0.2.post1+tuxcare"}]}],"versions":["2.0.2"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.6"},{"fixed":"2.2.6.post1+tuxcare"}]}],"versions":["2.2.6"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.26.4"},{"fixed":"1.26.4.post1+tuxcare"}]}],"versions":["1.26.4"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.21.6"},{"fixed":"1.21.6.post1+tuxcare"}]}],"versions":["1.21.6"],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.24.2-1","1:1.24.2-1+deb12u1","1:1.24.2-2","1:1.24.2-2+hurd.1","1:1.24.2-3","1:1.26.3-1","1:1.26.3-2","1:1.26.4+ds-1","1:1.26.4+ds-10","1:1.26.4+ds-11","1:1.26.4+ds-12","1:1.26.4+ds-13","1:1.26.4+ds-2","1:1.26.4+ds-3","1:1.26.4+ds-4","1:1.26.4+ds-5","1:1.26.4+ds-6","1:1.26.4+ds-7","1:1.26.4+ds-8","1:1.26.4+ds-9","1:1.26.4+ds-9~exp1","1:2.1.0+ds-1","1:2.1.0+ds-2","1:2.1.1+ds-1","1:2.1.1+ds-2","1:2.1.1+ds-3","1:2.1.2+ds-1","1:2.1.3+ds-1","1:2.1.3+ds-2","1:2.2.0+ds-1","1:2.2.1+ds-1","1:2.2.1+ds-2","1:2.2.2+ds-1","1:2.2.2+ds-2","1:2.2.3+ds-1","1:2.2.3+ds-2","1:2.2.3+ds-3","1:2.2.3+ds-4","1:2.2.3+ds-5","1:2.2.4+ds-1","1:2.2.4+ds-1.1","1:2.2.4+ds-1.2","1:2.3.2+ds-1","1:2.3.3+ds-1","1:2.3.3+ds-2","1:2.3.3+ds-3","1:2.3.4+ds-1","1:2.3.4+ds-2","1:2.3.4+ds-3","1:2.3.5+ds-1","1:2.3.5+ds-2","1:2.3.5+ds-3","1:2.4.1+ds-1","1:2.4.2+ds-1","1:2.4.3+ds-1","1:2.4.4+ds-1","1:2.4.4+ds-2","1:2.4.6+ds-1","1:2.4.6+ds-2","1:2.4.6+ds-3","1:2.4.6+ds-4","1:2.4.6+ds-5"]},{"source":"osv","ecosystem":"Debian:13","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.2.4+ds-1","1:2.2.4+ds-1.1","1:2.2.4+ds-1.2","1:2.3.2+ds-1","1:2.3.3+ds-1","1:2.3.3+ds-2","1:2.3.3+ds-3","1:2.3.4+ds-1","1:2.3.4+ds-2","1:2.3.4+ds-3","1:2.3.5+ds-1","1:2.3.5+ds-2","1:2.3.5+ds-3","1:2.4.1+ds-1","1:2.4.2+ds-1","1:2.4.3+ds-1","1:2.4.4+ds-1","1:2.4.4+ds-2","1:2.4.6+ds-1","1:2.4.6+ds-2","1:2.4.6+ds-3","1:2.4.6+ds-4","1:2.4.6+ds-5"]},{"source":"osv","ecosystem":"Debian:14","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.2.4+ds-1","1:2.2.4+ds-1.1","1:2.2.4+ds-1.2","1:2.3.2+ds-1","1:2.3.3+ds-1","1:2.3.3+ds-2","1:2.3.3+ds-3","1:2.3.4+ds-1","1:2.3.4+ds-2","1:2.3.4+ds-3","1:2.3.5+ds-1","1:2.3.5+ds-2","1:2.3.5+ds-3","1:2.4.1+ds-1","1:2.4.2+ds-1","1:2.4.3+ds-1","1:2.4.4+ds-1","1:2.4.4+ds-2","1:2.4.6+ds-1","1:2.4.6+ds-2","1:2.4.6+ds-3","1:2.4.6+ds-4","1:2.4.6+ds-5"]},{"source":"osv","ecosystem":"PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19"}]}],"versions":["0.9.6","0.9.8","1.0","1.0.3","1.0.4","1.0b1","1.0b4","1.0b5","1.0rc1","1.0rc2","1.0rc3","1.1.1","1.10.0","1.10.1","1.10.2","1.10.3","1.10.4","1.11.0","1.11.1","1.11.2","1.11.3","1.12.0","1.12.1","1.13.0","1.13.1","1.13.3","1.14.0","1.14.1","1.14.2","1.14.3","1.14.4","1.14.5","1.14.6","1.15.0","1.15.1","1.15.2","1.15.3","1.15.4","1.16.0","1.16.1","1.16.2","1.16.3","1.16.4","1.16.5","1.16.6","1.17.0","1.17.1","1.17.2","1.17.3","1.17.4","1.17.5","1.18.0","1.18.1","1.18.2","1.18.3","1.18.4","1.18.5","1.2.0","1.2.1","1.3.0","1.4.0","1.4.1","1.5.0","1.5.1","1.6.0","1.6.1","1.6.2","1.7.0","1.7.1","1.7.2","1.8.0","1.8.1","1.8.2","1.9.0","1.9.1","1.9.2","1.9.3"]},{"source":"osv","ecosystem":"Mageia:8","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.4-1.1.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-4.oe1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0"}]}],"versions":["0.9.6","0.9.8","1.0","1.0.3","1.0.4","1.0b1","1.0b4","1.0b5","1.0rc1","1.0rc2","1.0rc3","1.1.1","1.10.0","1.10.1","1.10.2","1.10.3","1.10.4","1.11.0","1.11.1","1.11.2","1.11.3","1.12.0","1.12.1","1.13.0","1.13.0rc1","1.13.0rc2","1.13.1","1.13.3","1.14.0","1.14.0rc1","1.14.1","1.14.2","1.14.3","1.14.4","1.14.5","1.14.6","1.15.0","1.15.0rc1","1.15.0rc2","1.15.1","1.15.2","1.15.3","1.15.4","1.16.0","1.16.0rc1","1.16.0rc2","1.16.1","1.16.2","1.16.3","1.16.4","1.16.5","1.16.6","1.17.0","1.17.0rc1","1.17.0rc2","1.17.1","1.17.2","1.17.3","1.17.4","1.17.5","1.18.0","1.18.0rc1","1.18.1","1.18.2","1.18.3","1.18.4","1.18.5","1.19.0rc1","1.19.0rc2","1.2.0","1.2.1","1.3.0","1.4.0","1.4.1","1.5.0","1.5.1","1.6.0","1.6.1","1.6.2","1.7.0","1.7.1","1.7.2","1.8.0","1.8.1","1.8.2","1.9.0","1.9.1","1.9.2","1.9.3"]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.17.0-8.el8ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"numpy-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.17.0-8.el8ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.17.0-8.el8ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-numpy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.17.0-8.el8ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-numpy-f2py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.17.0-8.el8ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.17.0-8.el8ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"numpy-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.17.0-8.el8ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.17.0-8.el8ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-numpy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.17.0-8.el8ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-numpy-f2py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.17.0-8.el8ost"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-5.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-5.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-5.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"python-numpy_1_17_3-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP3","package":"python-numpy_1_17_3-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"python-numpy_1_17_3-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"python-numpy_1_17_3-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"python-numpy_1_17_3-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"python-numpy_1_17_3-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"python-numpy_1_17_3-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-numpy_1_17_3-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"python-numpy_1_17_3-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-numpy_1_17_3-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 12","package":"python-numpy_1_13_3-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-4.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP3","package":"python-numpy_1_16_5-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150200.3.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150200.3.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"python-numpy_1_16_5-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150200.3.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150200.3.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-numpy_1_16_5-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150200.3.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150200.3.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150200.3.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150200.3.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150200.3.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150200.3.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150200.3.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150200.3.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-numpy_1_16_5-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150200.3.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"python-numpy_1_16_5-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150000.1.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150000.1.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"python-numpy_1_16_5-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150000.1.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150000.1.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"python-numpy_1_16_5-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150000.1.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150000.1.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-numpy_1_16_5-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150000.1.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150000.1.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150000.1.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150000.1.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150000.1.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150000.1.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150000.1.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150000.1.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.17.4-5ubuntu3.1"}]}],"versions":["1:1.17.3-0ubuntu2","1:1.17.4-3ubuntu1","1:1.17.4-3ubuntu2","1:1.17.4-5ubuntu2","1:1.17.4-5ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.21.5-1ubuntu22.04.1"}]}],"versions":["1:1.19.5-1ubuntu2","1:1.19.5-1ubuntu3","1:1.20.2-1ubuntu1","1:1.21.4-2","1:1.21.5-1","1:1.21.5-1build2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.17.4-5ubuntu3.1"}]}],"versions":["1:1.17.3-0ubuntu2","1:1.17.4-3ubuntu1","1:1.17.4-3ubuntu2","1:1.17.4-5ubuntu2","1:1.17.4-5ubuntu3"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.21.5-1ubuntu22.04.1"}]}],"versions":["1:1.19.5-1ubuntu2","1:1.19.5-1ubuntu3","1:1.20.2-1ubuntu1","1:1.21.4-2","1:1.21.5-1","1:1.21.5-1build2"],"bundled":4},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP3","package":"dxflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.17.0-bp153.2.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"dxflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.17.0-bp153.2.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-numpy_1_17_3-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"dxflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.17.0-bp153.2.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-numpy_1_17_3-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-numpy_1_16_5-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150200.3.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.5-150200.3.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.2-2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-numpy1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.4-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-1.1"}]}],"bundled":5}],"products":[{"vendor":"numpy","product":"numpy"}],"references":[{"url":"https://github.com/numpy/numpy/issues/19000","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41496","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-f7c7-j99h-c22f","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-41496","tags":["advisory"]},{"url":"https://github.com/numpy/numpy","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2022-0032.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29904","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LQS3J3J4254A7C3LD55D7A432FZ2RFFI/","tags":["web","advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1485","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0987","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2035034","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2035040","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0987.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33430","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33430","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33430","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-41496","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41496","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1000","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1000.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220118-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1193907","tags":["report"]},{"url":"https://bugzilla.suse.com/1193913","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41496","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220134-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220134-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220134-3/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220206-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221064-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1193911","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41495","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221064-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222441-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-41496","tags":["report"]},{"url":"https://github.com/numpy/numpy/pull/20630","tags":["report"]},{"url":"https://github.com/numpy/numpy/commit/271010f1037150e95017f803f4214b8861e528f2","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5763-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-33430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-34141","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-41495","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IVU5XH7TX2TXVVZCKS7DIEBNEJKYZTSK/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6446","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-41496","description":"Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy \u003c 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)","status":"disputed","published":"2021-12-17T19:56:35Z","modified":"2024-08-04T03:15:28.678Z","updated_at":"2026-11-02T14:32:59.105382Z"}],"euvd":[{"id":"EUVD-2021-0153","description":"Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy \u003c 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)","status":"published","published":"2021-12-17T19:56:35Z","modified":"2024-08-04T03:15:28Z","updated_at":"2026-11-03T03:24:17.663217Z"}],"ghsa":[{"id":"GHSA-f7c7-j99h-c22f","title":"Buffer Copy without Checking Size of Input in NumPy","description":"Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy \u003c 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values.","status":"published","published":"2022-02-08T00:00:56Z","modified":"2023-01-27T05:02:20Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:36:17.742171Z"}],"nvd":[{"id":"CVE-2021-41496","description":"Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy \u003c 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)","status":"disputed","published":"2021-12-17T20:15:08.517Z","modified":"2026-06-17T04:08:34.02Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:07:02.566991Z"}],"osv":[{"id":"AZL-7056","title":"CVE-2021-41496 affecting package numpy for versions less than 1.22.0-1","description":"Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy \u003c 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)","status":"published","published":"2021-12-17T20:15:08Z","modified":"2026-04-21T04:36:25.820515Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:08.907584Z"},{"id":"CVE-2021-41496","description":"Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy \u003c 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)","status":"published","published":"2021-12-17T20:15:08.517Z","modified":"2026-10-20T10:54:58.423633148Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:21.557945Z"},{"id":"DEBIAN-CVE-2021-41496","description":"Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy \u003c 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)","status":"published","published":"2021-12-17T20:15:08.517Z","modified":"2026-10-23T18:03:51.198755235Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"GHSA-f7c7-j99h-c22f","title":"Buffer Copy without Checking Size of Input in NumPy","description":"Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy \u003c 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values.","status":"published","published":"2022-02-08T00:00:56Z","modified":"2023-11-08T04:06:59.274139Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:46:46.006631Z"},{"id":"OESA-2022-1485","title":"numpy security update","description":"A fast multidimensional array facility for Python.\r\n\r\nSecurity Fix(es):\r\n\r\nBuffer overflow in the array_from_pyobj function of fortranobject.c in NumPy \u0026lt; 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values.(CVE-2021-41496)","status":"published","published":"2022-01-07T11:04:45Z","modified":"2026-08-18T01:16:16.598473601Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2022:0987","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (numpy) security update","status":"published","published":"2024-09-16T07:07:03Z","modified":"2026-01-14T11:03:12.092516Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1000","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (numpy) security update","status":"published","published":"2024-09-16T07:06:55Z","modified":"2026-06-26T10:58:14Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"UBUNTU-CVE-2021-41496","description":"Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy \u003c 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)","status":"published","published":"2021-12-17T20:15:00Z","modified":"2026-02-04T03:58:33.737158Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"CLSA-2025-1766621635","title":"TuxCare security update for numpy (1 CVE)","description":"TuxCare rebuilt numpy to address 1 CVE. Fixed in 1.16.0.post2+tuxcare.","status":"published","published":"2026-08-04T14:52:11Z","modified":"2026-10-20T13:45:20.270739337Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1791368060","title":"TuxCare security update for numpy (1 CVE)","description":"TuxCare rebuilt numpy to address 1 CVE. Fixed in 1.15.4.post5+tuxcare.","status":"published","published":"2026-10-07T10:14:20Z","modified":"2026-10-15T09:46:33.732813733Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"CLSA-2026-1793175147","title":"TuxCare security update for numpy (8 CVEs)","description":"TuxCare rebuilt numpy to address 8 CVEs. Fixed in 2.1.3.post1+tuxcare.","status":"published","published":"2026-10-28T08:12:27Z","modified":"2026-10-28T13:45:02.692353703Z","updated_at":"2026-11-02T15:43:55.34846Z"},{"id":"CLSA-2026-1793175390","title":"TuxCare security update for numpy (8 CVEs)","description":"TuxCare rebuilt numpy to address 8 CVEs. Fixed in 2.0.2.post1+tuxcare.","status":"published","published":"2026-10-28T08:16:30Z","modified":"2026-10-28T13:45:02.68137776Z","updated_at":"2026-11-02T15:43:55.34846Z"},{"id":"CLSA-2026-1793694087","title":"TuxCare security update for numpy (7 CVEs)","description":"TuxCare rebuilt numpy to address 7 CVEs. Fixed in 2.2.6.post1+tuxcare.","status":"published","published":"2026-11-03T09:21:28Z","modified":"2026-11-03T13:30:03.168418747Z","updated_at":"2026-11-03T14:04:50.729288Z"},{"id":"CLSA-2026-1793694742","title":"TuxCare security update for numpy (5 CVEs)","description":"TuxCare rebuilt numpy to address 5 CVEs. Fixed in 1.26.4.post1+tuxcare.","status":"published","published":"2026-11-03T09:32:23Z","modified":"2026-11-03T13:30:02.620682923Z","updated_at":"2026-11-03T14:04:50.729288Z"},{"id":"CLSA-2026-1793700288","title":"TuxCare security update for numpy (7 CVEs)","description":"TuxCare rebuilt numpy to address 7 CVEs. Fixed in 1.21.6.post1+tuxcare.","status":"published","published":"2026-11-03T11:04:49Z","modified":"2026-11-03T13:30:03.170920694Z","updated_at":"2026-11-03T14:04:50.729288Z"},{"id":"MGASA-2022-0032","title":"Updated python-numpy packages fix security vulnerability","description":"Buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function\nof ctors.c (bsc#1193913). (CVE-2021-33430)\nBuffer overflow that could lead to DoS in array_from_pyobj function of\nfortranobject.c (bsc#1193907). (CVE-2021-41496)\n","status":"published","published":"2022-01-25T12:13:11Z","modified":"2026-04-16T04:43:31.314482669Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2022:0134-1","title":"Security update for python-numpy","description":"This update for python-numpy fixes the following issues:\n\n- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).\n- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).\n","status":"published","published":"2022-10-17T11:25:14Z","modified":"2026-02-04T02:26:12.617681Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2022:1064-1","title":"Security update for python2-numpy","description":"This update for python2-numpy fixes the following issues:\n\n- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).\n- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).\n- CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort due to missing return value validation (bsc#1193911).\n","status":"published","published":"2022-09-12T11:08:44Z","modified":"2026-02-04T04:25:28.686127Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:13220-1","title":"python310-numpy-1.25.2-2.1 on GA media","description":"These are all security issues fixed in the python310-numpy-1.25.2-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:12:54.210171Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2024:14311-1","title":"python310-numpy1-1.26.4-1.1 on GA media","description":"These are all security issues fixed in the python310-numpy1-1.26.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-09-04T00:00:00Z","modified":"2026-02-04T02:59:21.451315Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2026:11371-1","title":"python313-numpy-2.4.6-1.1 on GA media","description":"These are all security issues fixed in the python313-numpy-2.4.6-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-24T00:00:00Z","modified":"2026-07-25T18:24:27.807636812Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"PYSEC-2021-857","description":"Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy \u003c 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values.","status":"published","published":"2021-12-17T20:15:00Z","modified":"2023-11-08T04:06:59.274139Z","updated_at":"2026-11-02T15:52:53.449407Z"},{"id":"SUSE-SU-2022:0118-1","title":"Security update for python-numpy","description":"This update for python-numpy fixes the following issues:\n\n- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).\n- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).  \n","status":"published","published":"2022-01-18T15:41:40Z","modified":"2025-05-02T04:31:28.457382Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0134-1","title":"Security update for python-numpy","description":"This update for python-numpy fixes the following issues:\n\n- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).\n- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).\n","status":"published","published":"2022-10-17T11:25:12Z","modified":"2026-02-04T03:21:34.70662Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0134-2","title":"Security update for python-numpy","description":"This update for python-numpy fixes the following issues:\n\n- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).\n- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).\n","status":"published","published":"2022-10-17T11:25:16Z","modified":"2026-02-04T03:27:19.400325Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0134-3","title":"Security update for python-numpy","description":"This update for python-numpy fixes the following issues:\n\n- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).\n- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).\n","status":"published","published":"2022-10-17T11:26:27Z","modified":"2026-02-04T03:54:21.732306Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0206-1","title":"Security update for python-numpy","description":"This update for python-numpy fixes the following issues:\n\n- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).\n- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).\n","status":"published","published":"2022-01-27T08:20:22Z","modified":"2026-02-04T03:38:33.767228Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:1064-1","title":"Security update for python2-numpy","description":"This update for python2-numpy fixes the following issues:\n\n- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).\n- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).\n- CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort due to missing return value validation (bsc#1193911).\n","status":"published","published":"2022-09-12T11:08:42Z","modified":"2026-02-04T02:31:40.817365Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1064-2","title":"Security update for python2-numpy","description":"This update for python2-numpy fixes the following issues:\n\n- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).\n- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).\n- CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort due to missing return value validation (bsc#1193911).\n","status":"published","published":"2022-09-12T11:09:13Z","modified":"2026-02-04T04:20:20.156197Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2441-1","title":"Security update for python2-numpy","description":"This update for python2-numpy fixes the following issues:\n\n- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).\n- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).\n- CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort (bsc#1193911).\n","status":"published","published":"2022-07-19T14:52:30Z","modified":"2025-05-02T04:31:28.884583Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-5763-1","title":"numpy vulnerabilities","description":"It was discovered that NumPy did not properly manage memory when specifying\narrays of large dimensions. If a user were tricked into running malicious\nPython file, an attacker could cause a denial of service. This issue only\naffected Ubuntu 20.04 LTS. (CVE-2021-33430)\n\nIt was discovered that NumPy did not properly perform string comparison\noperations under certain circumstances. An attacker could possibly use\nthis issue to cause NumPy to crash, resulting in a denial of service.\n(CVE-2021-34141)\n\nIt was discovered that NumPy did not properly manage memory under certain\ncircumstances. An attacker could possibly use this issue to cause NumPy to\ncrash, resulting in a denial of service. (CVE-2021-41495, CVE-2021-41496)\n","status":"published","published":"2022-12-07T05:01:48Z","modified":"2026-02-10T04:42:52Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}