Q: Is CVE-2021-41496 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 0%.

Q: What products does CVE-2021-41496 affect?

Tracked products affected include NumPy. Check the version you run to see whether it is affected.

Q: How do I fix CVE-2021-41496?

Apply the vendor fix in your normal patch cycle. An official patch or advisory is available. Upgrade affected products to a fixed version.

Question 1

What is CVE-2021-41496?

Accepted Answer

CVE-2021-41496 is a medium-severity software vulnerability (Buffer overflow) with a CVSS score of 5.5. Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this

Question 2

Is CVE-2021-41496 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 0%.

Question 3

What products does CVE-2021-41496 affect?

Accepted Answer

Tracked products affected include NumPy. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2021-41496?

Accepted Answer

Apply the vendor fix in your normal patch cycle. An official patch or advisory is available. Upgrade affected products to a fixed version.

CVE-2021-41496

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information