GHSA-jrfm-2h82-xg28

Source

https://github.com/advisories/GHSA-jrfm-2h82-xg28

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/07/GHSA-jrfm-2h82-xg28/GHSA-jrfm-2h82-xg28.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-jrfm-2h82-xg28

Aliases

Withdrawn

2024-05-03T10:26:19Z

Published

2023-07-06T21:30:28Z

Modified

2026-06-10T17:11:12Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Withdrawn: Use after free in SciPy

Details

Withdrawn Advisory

This advisory has been withdrawn because it has been found to not be an issue. Please see the issue here for more information.

Original Description

A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0.

Database specific

{
    "cwe_ids":  [
        "CWE-416"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2024-04-22T18:55:58Z",
    "nvd_published_at":  "2023-07-06T21:15:09Z",
    "severity":  "CRITICAL"
}

References

Affected packages

PyPI / scipy

Package

Name: scipy; View open source insights on deps.dev
Purl: pkg:pypi/scipy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.8.0

Affected versions

0.*

0.4.4

0.5.2

0.6.0

0.7.0

0.7.2

0.8.0

0.9.0

0.10.0

0.10.1

0.11.0

0.12.0

0.12.1

0.13.0

0.13.1

0.13.2

0.13.3

0.14.0

0.14.1

0.15.0

0.15.1

0.16.0

0.16.1

0.17.0

0.17.1

0.18.0

0.18.1

0.19.0

0.19.1

1.*

1.0.0

1.0.1

1.1.0

1.2.0

1.2.1

1.2.2

1.2.3

1.3.0

1.3.1

1.3.2

1.3.3

1.4.0

1.4.1

1.5.0

1.5.1

1.5.2

1.5.3

1.5.4

1.6.0

1.6.1

1.6.2

1.6.3

1.7.0

1.7.1

1.7.2

1.7.3

1.8.0rc1

1.8.0rc2

1.8.0rc3

1.8.0rc4

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/07/GHSA-jrfm-2h82-xg28/GHSA-jrfm-2h82-xg28.json"