CVE-2021-41496

Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)

• CWE-120

• https://github.com/numpy/numpy/issues/19000Exploit, Issue Tracking, Patch, Third Party Advisory
• https://www.oracle.com/security-alerts/cpujul2022.htmlThird Party Advisory
• https://github.com/numpy/numpy/issues/19000Exploit, Issue Tracking, Patch, Third Party Advisory
• https://www.oracle.com/security-alerts/cpujul2022.htmlThird Party Advisory

Published

Dec 17, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-4148A vulnerability was found in the Linux kernel's block_invali…5.5
• CVE-2021-41487NOKIA VitalSuite SPM 2020 is affected by SQL injection throu…9.8
• CVE-2021-4149A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/…5.5
• CVE-2021-41490Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpec…7.5
• CVE-2021-41492Multiple SQL Injection vulnerabilities exist in Sourcecodest…9.8
• CVE-2021-41495Null Pointer Dereference vulnerability exists in numpy.sort …5.3
• CVE-2021-41497Null pointer reference in CMS_Conservative_increment_obj in …7.5
• CVE-2021-41498Buffer overflow in ajaxsoundstudio.com Pyo &lt and 1.03 in t…7.5
• CVE-2021-41499Buffer Overflow Vulnerability exists in ajaxsoundstudio.com …7.5
• CVE-2021-4150A use-after-free flaw was found in the add_partition in bloc…5.5
• CVE-2021-41500Incomplete string comparison vulnerability exits in cvxopt.o…7.5
• CVE-2021-41502An issue was discovered in Subrion CMS v4.2.1 There is a sto…5.4