CVSS 3.0
7.5 highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2017-12852
The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.
Severity
- EPSS
- 2.7% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
- CWE
- CWE-835
- Published
- Modified
- Record from
- the NVD, synced
Affected
- numpy:numpy
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-frgw-fgh6-9g52 | PyPI | numpy | <1.13.3 | 1.13.3 |
| PYSEC-2017-1 | PyPI | numpy | <1.13.3 | 1.13.3 |