https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:03:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-05412 bdu:2023-05412 https://cve.radiocsirt.org/vuln/bdu:2023-05412 https://cve.radiocsirt.org/vuln/brew-numpy-cve-2021-41495 <p><strong>Affected:</strong> Homebrew: numpy</p> <p>Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &amp;lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place</p> <p><strong>Affected:</strong> Homebrew: numpy</p> <p>Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &amp;lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place</p> https://cve.radiocsirt.org/vuln/brew-numpy-cve-2021-41495 https://cve.radiocsirt.org/vuln/certfr-2022-avi-929 certfr-2022-avi-929 https://cve.radiocsirt.org/vuln/certfr-2022-avi-929 https://cve.radiocsirt.org/vuln/cnvd-2021-101681 cnvd-2021-101681 https://cve.radiocsirt.org/vuln/cnvd-2021-101681 https://cve.radiocsirt.org/vuln/euvd-2026-31720 EUVD-2026-31720 https://cve.radiocsirt.org/vuln/euvd-2026-31720 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41495 <p>Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &amp;lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place</p> <p>Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &amp;lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-41495 https://cve.radiocsirt.org/vuln/ghsa-5545-2q6w-2gh6 <p><strong>Affected:</strong> PyPI: numpy</p> <p>Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &amp;lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays.</p> <p><strong>Affected:</strong> PyPI: numpy</p> <p>Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &amp;lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays.</p> https://cve.radiocsirt.org/vuln/ghsa-5545-2q6w-2gh6 https://cve.radiocsirt.org/vuln/gsd-2021-41495 gsd-2021-41495 https://cve.radiocsirt.org/vuln/gsd-2021-41495 https://cve.radiocsirt.org/vuln/msrc_cve-2021-41495 msrc_CVE-2021-41495 https://cve.radiocsirt.org/vuln/msrc_cve-2021-41495 https://cve.radiocsirt.org/vuln/oesa-2022-1522 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: numpy, openEuler:20.03-LTS-SP2: numpy, openEuler:20.03-LTS-SP3: numpy</p> <p>A fast multidimensional array facility for Python. Security Fix(es): Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &amp;amp;lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays.(CVE-2021-41495) An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is &amp;quot;completely harmless.&amp;quot;(CVE-2021-34141)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: numpy, openEuler:20.03-LTS-SP2: numpy, openEuler:20.03-LTS-SP3: numpy</p> <p>A fast multidimensional array facility for Python. Security Fix(es): Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &amp;amp;lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays.(CVE-2021-41495) An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is &amp;quot;completely harmless.&amp;quot;(CVE-2021-34141)</p> https://cve.radiocsirt.org/vuln/oesa-2022-1522 https://cve.radiocsirt.org/vuln/opensuse-su-2022:1064-1 <p>Security update for python2-numpy</p> <p>Security update for python2-numpy</p> https://cve.radiocsirt.org/vuln/opensuse-su-2022:1064-1 https://cve.radiocsirt.org/vuln/pysec-2021-856 <p><strong>Affected:</strong> PyPI: numpy</p> <p>Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &amp;lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays.</p> <p><strong>Affected:</strong> PyPI: numpy</p> <p>Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &amp;lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays.</p> https://cve.radiocsirt.org/vuln/pysec-2021-856 https://cve.radiocsirt.org/vuln/rhsa-2022:8852 <p>numpy: NULL pointer dereference in numpy.sort in in the PyArray_DescrNew() due to missing return-value validation</p> <p>numpy: NULL pointer dereference in numpy.sort in in the PyArray_DescrNew() due to missing return-value validation</p> https://cve.radiocsirt.org/vuln/rhsa-2022:8852 https://cve.radiocsirt.org/vuln/suse-su-2022:1064-1 <p>Security update for python2-numpy</p> <p>Security update for python2-numpy</p> https://cve.radiocsirt.org/vuln/suse-su-2022:1064-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-41495 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: numpy, Ubuntu:22.04:LTS: numpy</p> <p>Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &amp;lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: numpy, Ubuntu:22.04:LTS: numpy</p> <p>Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &amp;lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-41495 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0302 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0302