CVE-2021-34141

Source

https://nvd.nist.gov/vuln/detail/CVE-2021-34141

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-34141.json

Aliases

• GHSA-fpfv-jqm9-f5jm
• PYSEC-2021-855

Related

• USN-5763-1

Published

2021-12-17T19:15:07Z

Modified

2023-11-29T08:56:06.185646Z

Details

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."

References

• https://github.com/numpy/numpy/issues/18993
• https://www.oracle.com/security-alerts/cpujul2022.html