CVE-2017-12852

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation

published August 15, 2017

CVSS
—
EPSS
3%
Percentile
85.8
In the wild
Unconfirmed
What it is

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02715 · 85.8th percentile
Published
2017-08-15T16:00Z
EPSS history
Timeline
  • 15 AUG 16:00Z
    The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation
    cvelistv5