Security Advisory

CVE-2019-6446

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-01-16 05:00:00

Last updated 2024-08-04 20:23:20

Assigner mitre

State PUBLISHED

Description

An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in (for example) loading serialized Python object arrays from trusted and authenticated sources

← Browse all CVEs View on cve.org ↗