CVE-2021-34141 vulnerability in Numpy and Other Products
Published on December 17, 2021
An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."
Products Associated with CVE-2021-34141
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2021-34141 are published in these products:
Exploit Probability
EPSS
0.06%
Percentile
20.05%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.