CVE-2021-41495: numpy NULL Pointer Dereference
Vulnerability summary
CVE-2021-41495 is a medium (CVSS 5.3) NULL Pointer Dereference vulnerability in numpy. EPSS estimates a 1.24% chance of exploitation in the next 30 days, higher than 68.9% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 8 · Related 8Timeline
- 17-12-2021PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place
CVSS metrics
6 scores · 5 sources · 2 versions- OSV · PypiEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HDiffers
- OSV · Red hatEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated5.3MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.3MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
1.24%
Chance of exploitation in the next 30 days
Percentile
69%
Versus all other CVEs
30-day change
+0.09 pp
From 1.15% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundNumpy
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Suse9 products
- python-numpy_1_13_3-gnu-hpc&distro=SUSE Linux Enterprise Module for HPC 12< 1.13.3-4.15.1
- python-numpy_1_17_3-gnu-hpc&distro=SUSE Linux Enterprise Module for HPC 15 SP4< 1.17.3-150400.23.3.1
- python-numpy_1_17_3-gnu-hpc&distro=SUSE Linux Enterprise Module for HPC 15 SP6< 1.17.3-150400.31.1
- python-numpy_1_17_3-gnu-hpc&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6< 1.17.3-150400.31.1
- python-numpy&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4< 1.17.3-150400.23.3.1
Redhat5 products
- numpy< 1:1.17.0-11.el8ost
- numpy-debugsource< 1:1.17.0-11.el8ost
- python3-numpy< 1:1.17.0-11.el8ost
- python3-numpy-debuginfo< 1:1.17.0-11.el8ost
- python3-numpy-f2py< 1:1.17.0-11.el8ost
Opensuse4 products
- python-numpy_1_17_3-gnu-hpc&distro=openSUSE Leap 15.4< 1.17.3-150400.23.3.1
- python-numpy_1_17_3-gnu-hpc&distro=openSUSE Leap 15.6< 1.17.3-150400.31.1
- python-numpy&distro=openSUSE Leap 15.4< 1.17.3-150400.23.3.1
- python3-numpy&distro=openSUSE Leap 15.6< 1.17.3-150400.31.1
Debian1 product
- numpyAll versions (No fix recorded)
Numpy1 product
- numpy≤ 1.19.0
PyPI1 product
- numpy< 1.19 | < 1.19.1
Ubuntu1 product
- numpy< 1:1.17.4-5ubuntu3.1 | < 1:1.21.5-1ubuntu22.04.1
7 vendors · 22 products
References
26 links- github.com/numpy/numpy/issues/19038X Refsource MISCWEBREPORTExploitIssue TrackingThird Party Advisory
Show all 26 references
- github.com/numpy/numpyPACKAGE
