cve/2021/CVE-2021-34141.md

CVE-2021-34141

Description

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."

POC

Reference

• https://www.oracle.com/security-alerts/cpujul2022.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/Daybreak2019/PolyCruise
• https://github.com/aryanxsh/example-vulnerable-repo
• https://github.com/awen-li/PolyCruise
• https://github.com/mangoding71/AGNC
• https://github.com/s3dev/ppklib