—

PYSEC-2021-854

Quick fix

PYSEC-2021-854 — numpy: upgrade to the fixed version with the command below.

pip install --upgrade 'numpy>=1.10.0'

Details

A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a malicious user cause a Denial of Service.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/numpy

Introduced in: 1.9.0Fixed in: 1.10.0

Fixpip install --upgrade 'numpy>=1.10.0'

References

https://github.com/numpy/numpy/issues/18939[REPORT]
https://github.com/advisories/GHSA-6p56-wp2h-9hxr[ADVISORY]