CVE-2021-34141

PoC —

CVSS 3.1

5.3 medium

EPSS

2%p74

Published

Dec 17, 2021 (Dec 17, 2021)

Modified

Jun 17, 2026

Description

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."

Vendors: numpy oracle
Products: numpy, communications cloud native core policy
Weakness: CWE-697
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.