Scipy

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-29824 PyPI CRITICAL POC PATCH Act Now

A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Use After Free Information Disclosure Memory Corruption Scipy

NVD GitHub

CVSS 3.1

9.8

EPSS

1.3%

CVE-2023-25399 PyPI MEDIUM POC PATCH This Month

A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available.

Information Disclosure Scipy

NVD GitHub

CVSS 3.1

5.5

EPSS

0.4%

CVE-2023-29824 PyPI

EPSS 1% CVSS 9.8

CRITICAL POC PATCH Act Now

Use After Free Information Disclosure Memory Corruption +1

NVD GitHub

CVE-2023-25399 PyPI

EPSS 0% CVSS 5.5

MEDIUM POC PATCH This Month

Information Disclosure Scipy

NVD GitHub