CVE-2021-34141 | BDVDB-2026-166133 Detail

Description#

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/numpy/numpy/issues/18993
https://www.oracle.com/security-alerts/cpujul2022.html

Exploit#

No public exploit known

History#

Version 12021-12-17Record published in the CVE List.
Version 22026-10-08Most recent update recorded in the CVE List.