Kurz gesagt
- CVE-2023-25399 ist eine Schwachstelle (MITTEL (CVSS 5.5)) in scipy, scipy (scipy).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.38%, höher als bei 32.3% aller Schwachstellen.
- Abhilfe: auf 1.10.0 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| scipy PyPI | < 1.10.0
| 1.10.0
|
| scipy | < 1.10.0
| 1.10.0
|
Description
Withdrawn Advisory
This advisory has been withdrawn because it has been found to not be an issue. Please see the issue here for more information.
Original Description
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function.
NVD description
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This is disputed as a bug and not a vulnerability. SciPy is not designed to be exposed to untrusted users or data directly.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free