{"id":"CVE-2023-25399","aliases":["DEBIAN-CVE-2023-25399","EUVD-2023-0234","GHSA-9jx5-6pgf-crrp","MGASA-2024-0078","OESA-2023-1491","PYSEC-2023-102","SUSE-SU-2023:2970-1","SUSE-SU-2023:3272-1","UBUNTU-CVE-2023-25399","USN-6226-1"],"status":"disputed","title":"Withdrawn: scipy memory leak vulnerability","description":"A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This is disputed as a bug and not a vulnerability. SciPy is not designed to be exposed to untrusted users or data directly.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00378,"percentile":0.32045,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400","CWE-401"],"published":"2023-07-05T00:00:00Z","modified":"2026-10-28T02:30:47Z","fixes":[{"ecosystem":"Debian:12","package":"scipy","fixed_in":["1.10.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"scipy","fixed_in":["1.10.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"scipy","fixed_in":["1.10.0-2"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"python-scipy","fixed_in":["1.9.1-2.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"scipy","fixed_in":["1.2.2-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"scipy","fixed_in":["1.2.2-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"scipy","fixed_in":["1.6.2-2.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"scipy","fixed_in":["1.6.2-2.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"scipy","fixed_in":["1.6.2-2.oe2203sp2"],"sources":["osv"]},{"ecosystem":"PyPI","package":"scipy","fixed_in":["1.10.0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"scipy","fixed_in":["1.8.0-1exp2ubuntu1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-2"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"python-scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-2.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-2.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-2.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-2.oe2203sp2"}]}]},{"source":"osv","ecosystem":"PyPI","package":"scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0"}]}],"versions":["0.10.0","0.10.1","0.11.0","0.12.0","0.12.1","0.13.0","0.13.1","0.13.2","0.13.3","0.14.0","0.14.1","0.15.0","0.15.1","0.16.0","0.16.1","0.17.0","0.17.1","0.18.0","0.18.1","0.19.0","0.19.1","0.4.4","0.5.2","0.6.0","0.7.0","0.7.2","0.8.0","0.9.0","1.0.0","1.0.1","1.1.0","1.10.0rc1","1.10.0rc2","1.2.0","1.2.1","1.2.2","1.2.3","1.3.0","1.3.1","1.3.2","1.3.3","1.4.0","1.4.1","1.5.0","1.5.1","1.5.2","1.5.3","1.5.4","1.6.0","1.6.1","1.6.2","1.6.3","1.7.0","1.7.1","1.7.2","1.7.3","1.8.0","1.8.0rc1","1.8.0rc2","1.8.0rc3","1.8.0rc4","1.8.1","1.9.0","1.9.0rc1","1.9.0rc2","1.9.0rc3","1.9.1","1.9.2","1.9.3"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-150100.4.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-scipy_1_2_0-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-150100.4.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-scipy_1_2_0-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-150100.4.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP4","package":"python-scipy_1_3_3-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-150200.5.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP5","package":"python-scipy_1_3_3-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-150200.5.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"python-scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-150200.5.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"python-scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-150200.5.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"python-scipy_1_3_3-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-150200.5.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-150200.5.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-scipy_1_3_3-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-150200.5.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-150200.5.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-scipy_1_3_3-gnu-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-150200.5.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-1exp2ubuntu1+esm1"}]}],"versions":["1.6.0-2","1.7.1-1ubuntu1","1.8.0-1exp2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-3ubuntu0.1~esm1"}]}],"versions":["1.3.3-3","1.3.3-3build1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-1exp2ubuntu1+esm1"}]}],"versions":["1.6.0-2","1.7.1-1ubuntu1","1.8.0-1exp2ubuntu1"],"bundled":2}],"products":[{"vendor":"scipy","product":"scipy"}],"references":[{"url":"https://github.com/scipy/scipy/issues/16235","tags":["x_transferred","Exploit","Issue Tracking","Patch","Vendor Advisory","report","web","evidence","fix","advisory"]},{"url":"https://github.com/scipy/scipy/pull/16397","tags":["x_transferred","Patch","fix","web","report"]},{"url":"http://www.square16.org/achievement/cve-2023-25399/","tags":["x_transferred","Third Party Advisory","web","report"]},{"url":"https://github.com/scipy/scipy/issues/16235#issuecomment-1625361328","tags":["x_transferred","report","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25399","tags":["advisory"]},{"url":"https://github.com/scipy/scipy/commit/9b6521198c4f31d3f9cb525e581bea8e3e77f0a2","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/scipy/PYSEC-2023-102.yaml","tags":["web"]},{"url":"http://www.square16.org/achievement/cve-2023-25399","tags":["web"]},{"url":"https://github.com/advisories/GHSA-9jx5-6pgf-crrp","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25399.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-25399","tags":["advisory"]},{"url":"https://github.com/scipy/scipy","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2024-0078.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32116","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6226-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1491","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232970-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1213062","tags":["report"]},{"url":"https://bugzilla.suse.com/1213137","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29824","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233272-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-25399","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25399","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-29824","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-25399","description":"A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This is disputed as a bug and not a vulnerability. SciPy is not designed to be exposed to untrusted users or data directly.","status":"disputed","published":"2023-07-05T00:00:00Z","modified":"2024-08-02T11:18:36.341Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:35:19.559321Z"}],"euvd":[{"id":"EUVD-2023-0234","description":"A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This is disputed as a bug and not a vulnerability. SciPy is not designed to be exposed to untrusted users or data directly.","status":"published","published":"2023-07-05T00:00:00Z","modified":"2024-08-02T11:18:36Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T03:50:07.32318Z"}],"ghsa":[{"id":"GHSA-9jx5-6pgf-crrp","title":"Withdrawn: scipy memory leak vulnerability","description":"## Withdrawn Advisory\n\nThis advisory has been withdrawn because it has been found to not be an issue. Please see the issue [here](https://github.com/scipy/scipy/issues/16235#issuecomment-1625361328) for more information.\n\n## Original Description\n\nA refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in `Py_FindObjects()` function.","status":"withdrawn","published":"2023-07-05T18:30:44Z","modified":"2024-05-14T20:15:45Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:37:48.848211Z"}],"nvd":[{"id":"CVE-2023-25399","description":"A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This is disputed as a bug and not a vulnerability. SciPy is not designed to be exposed to untrusted users or data directly.","status":"disputed","published":"2023-07-05T17:15:09.32Z","modified":"2026-06-17T05:41:10.9Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:08:14.715708Z"}],"osv":[{"id":"CVE-2023-25399","description":"A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This is disputed as a bug and not a vulnerability. SciPy is not designed to be exposed to untrusted users or data directly.","status":"published","published":"2023-07-05T00:00:00Z","modified":"2026-10-28T02:30:47.915483687Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:30.709518Z"},{"id":"DEBIAN-CVE-2023-25399","description":"A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This is disputed as a bug and not a vulnerability. SciPy is not designed to be exposed to untrusted users or data directly.","status":"published","published":"2023-07-05T17:15:09.32Z","modified":"2026-10-26T18:01:09.855413117Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:39.369204Z"},{"id":"GHSA-9jx5-6pgf-crrp","title":"Withdrawn: scipy memory leak vulnerability","description":"## Withdrawn Advisory\n\nThis advisory has been withdrawn because it has been found to not be an issue. Please see the issue [here](https://github.com/scipy/scipy/issues/16235#issuecomment-1625361328) for more information.\n\n## Original Description\n\nA refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in `Py_FindObjects()` function.","status":"withdrawn","published":"2023-07-05T18:30:44Z","modified":"2026-06-10T17:11:23.230726715Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:46:43.875515Z"},{"id":"OESA-2023-1491","title":"scipy security update","description":"SciPy (pronounced \"Sigh Pie\") is open-source software for mathematics, science, and engineering. It includes modules for statistics, optimization, integration, linear algebra, Fourier transforms, signal and image processing, ODE solvers, and more.\r\n\r\nSecurity Fix(es):\r\n\r\nA refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function.(CVE-2023-25399)","status":"published","published":"2023-08-12T11:05:57Z","modified":"2026-08-18T01:17:46.948079316Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"UBUNTU-CVE-2023-25399","description":"A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This is disputed as a bug and not a vulnerability. SciPy is not designed to be exposed to untrusted users or data directly.","status":"published","published":"2023-07-06T00:00:00Z","modified":"2026-02-04T02:42:04.567658Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:20.198616Z"},{"id":"MGASA-2024-0078","title":"Updated python-scipy packages fix security vulnerability","description":"A refcounting issue which leads to potential memory leak was discovered\nin scipy commit 8627df31ab in Py_FindObjects() function. (CVE-2023-25399\n","status":"published","published":"2024-03-21T04:56:12Z","modified":"2026-04-16T04:41:43.719633539Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"PYSEC-2023-102","description":"A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function.","status":"published","published":"2023-07-05T17:15:00Z","modified":"2026-06-10T17:11:23.230726715Z","updated_at":"2026-11-02T15:52:53.837392Z"},{"id":"SUSE-SU-2023:2970-1","title":"Security update for python-scipy","description":"This update for python-scipy fixes the following issues:\n\n- CVE-2023-25399: Fixed minor refcounting issue in Py_FindObjects (bsc#1213062).\n- CVE-2023-29824: Fixed use-after-free in Py_FindObjects (bsc#1213137).\n","status":"published","published":"2023-07-25T13:55:17Z","modified":"2026-02-04T02:41:48.834315Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3272-1","title":"Security update for python-scipy","description":"This update for python-scipy fixes the following issues:\n\n- CVE-2023-25399: Fixed minor refcounting issue in Py_FindObjects (bsc#1213062).\n- CVE-2023-29824: Fixed use-after-free in Py_FindObjects (bsc#1213137).\n","status":"published","published":"2023-08-11T07:11:11Z","modified":"2026-02-04T03:15:06.856318Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"USN-6226-1","title":"scipy vulnerabilities","description":"It was discovered that SciPy did not properly manage memory operations\nduring reference counting. An attacker could possibly use this issue to\ncause a denial of service. (CVE-2023-25399)\n\nA use-after-free was discovered in SciPy when handling reference counts. An\nattacker could possibly use this to cause a denial of service. This issue\nonly affected Ubuntu 20.04 LTS. (CVE-2023-29824)\n","status":"published","published":"2023-07-13T03:58:14Z","modified":"2026-02-10T04:43:12Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}