Medium severity5.5NVD Advisory· Published Dec 17, 2021· Updated Jun 17, 2026
CVE-2021-41496
CVE-2021-41496
Description
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
numpyPyPI | < 1.19 | 1.19 |
Affected products
71- NumPy/NumPydescription
- ghsa-coords69 versionspkg:pypi/numpypkg:rpm/opensuse/dxflib&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/python-numpy&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/python-numpy&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/python-numpy1&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/python-numpy_1_16_5-gnu-hpc&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/python-numpy_1_16_5-gnu-hpc&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/python-numpy_1_17_3-gnu-hpc&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/python2-numpy&distro=openSUSE%20Leap%2015.3pkg:rpm/suse/dxflib&distro=SUSE%20Package%20Hub%2015%20SP3pkg:rpm/suse/python-numpy&distro=SUSE%20Enterprise%20Storage%206pkg:rpm/suse/python-numpy&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/suse/python-numpy&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOSpkg:rpm/suse/python-numpy&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/python-numpy&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOSpkg:rpm/suse/python-numpy&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/python-numpy&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/python-numpy&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/python-numpy&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3pkg:rpm/suse/python-numpy&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP2pkg:rpm/suse/python-numpy&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/python-numpy&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCLpkg:rpm/suse/python-numpy&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/python-numpy&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCLpkg:rpm/suse/python-numpy&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/python-numpy&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/python-numpy&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/python-numpy&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015pkg:rpm/suse/python-numpy&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/python-numpy&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/python-numpy&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/python-numpy&distro=SUSE%20Manager%20Proxy%204.1pkg:rpm/suse/python-numpy&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1pkg:rpm/suse/python-numpy&distro=SUSE%20Manager%20Server%204.1pkg:rpm/suse/python-numpy_1_13_3-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012pkg:rpm/suse/python-numpy_1_16_5-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOSpkg:rpm/suse/python-numpy_1_16_5-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/python-numpy_1_16_5-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOSpkg:rpm/suse/python-numpy_1_16_5-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/python-numpy_1_16_5-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/python-numpy_1_16_5-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/python-numpy_1_16_5-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2015%20SP3pkg:rpm/suse/python-numpy_1_17_3-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOSpkg:rpm/suse/python-numpy_1_17_3-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/python-numpy_1_17_3-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOSpkg:rpm/suse/python-numpy_1_17_3-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/python-numpy_1_17_3-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/python-numpy_1_17_3-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/python-numpy_1_17_3-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2015%20SP3pkg:rpm/suse/python-numpy_1_17_3-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP2pkg:rpm/suse/python2-numpy&distro=SUSE%20Enterprise%20Storage%206pkg:rpm/suse/python2-numpy&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/suse/python2-numpy&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOSpkg:rpm/suse/python2-numpy&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/python2-numpy&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOSpkg:rpm/suse/python2-numpy&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/python2-numpy&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/python2-numpy&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/python2-numpy&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Python%202%2015%20SP3pkg:rpm/suse/python2-numpy&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCLpkg:rpm/suse/python2-numpy&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/python2-numpy&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/python2-numpy&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/python2-numpy&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015pkg:rpm/suse/python2-numpy&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/python2-numpy&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/python2-numpy&distro=SUSE%20Manager%20Proxy%204.1pkg:rpm/suse/python2-numpy&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1pkg:rpm/suse/python2-numpy&distro=SUSE%20Manager%20Server%204.1
< 1.19+ 68 more
- (no CPE)range: < 1.19
- (no CPE)range: < 3.17.0-bp153.2.3.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.25.2-2.1
- (no CPE)range: < 1.26.4-1.1
- (no CPE)range: < 1.16.5-150200.3.5.1
- (no CPE)range: < 1.16.5-150200.3.5.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.16.5-150200.3.5.1
- (no CPE)range: < 3.17.0-bp153.2.3.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.8.0-5.11.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.8.0-5.11.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.8.0-5.11.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.13.3-4.12.1
- (no CPE)range: < 1.16.5-150000.1.9.1
- (no CPE)range: < 1.16.5-150000.1.9.1
- (no CPE)range: < 1.16.5-150200.3.5.1
- (no CPE)range: < 1.16.5-150200.3.5.1
- (no CPE)range: < 1.16.5-150000.1.9.1
- (no CPE)range: < 1.16.5-150000.1.9.1
- (no CPE)range: < 1.16.5-150200.3.5.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.17.3-10.1
- (no CPE)range: < 1.16.5-150000.1.9.1
- (no CPE)range: < 1.16.5-150200.3.5.1
- (no CPE)range: < 1.16.5-150000.1.9.1
- (no CPE)range: < 1.16.5-150000.1.9.1
- (no CPE)range: < 1.16.5-150200.3.5.1
- (no CPE)range: < 1.16.5-150200.3.5.1
- (no CPE)range: < 1.16.5-150000.1.9.1
- (no CPE)range: < 1.16.5-150000.1.9.1
- (no CPE)range: < 1.16.5-150200.3.5.1
- (no CPE)range: < 1.16.5-150000.1.9.1
- (no CPE)range: < 1.16.5-150000.1.9.1
- (no CPE)range: < 1.16.5-150200.3.5.1
- (no CPE)range: < 1.16.5-150000.1.9.1
- (no CPE)range: < 1.16.5-150000.1.9.1
- (no CPE)range: < 1.16.5-150000.1.9.1
- (no CPE)range: < 1.16.5-150200.3.5.1
- (no CPE)range: < 1.16.5-150200.3.5.1
- (no CPE)range: < 1.16.5-150200.3.5.1
- (no CPE)range: < 1.16.5-150200.3.5.1
Patches
Vulnerability mechanics
References
4- github.com/numpy/numpy/issues/19000nvdExploitIssue TrackingPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-f7c7-j99h-c22fghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2021-41496ghsaADVISORY
- www.oracle.com/security-alerts/cpujul2022.htmlnvdThird Party AdvisoryWEB
News mentions
0No linked articles in our index yet.