CVE-2019-6446
16.01.2019, 05:29
An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in (for example) loading serialized Python object arrays from trusted and authenticated sourcesEnginsight
| Vendor | Product | Version |
|---|---|---|
| numpy | numpy | 𝑥 ≤ 1.16.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References