VULNERABILITY INTELLIGENCE

CVE-2017-12852

CVSS score7.5 HIGH
EPSS probability2.71%
CISA KEVNot currently listed
Published2017-08-15
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.

Weakness classification

  • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

Primary references