Advisory ROSA-SA-2025-2689

Software: scipy 1.0.0 OS: ROSA Virtualization 3.0 packageevrstring: scipy-1.0.0-21.0.2 CVE-ID: CVE-2023-29824 BDU-ID: 2024-07432 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the PyFindObjects function of the PyFindObjects library for the open source Python programming language scipy is relat...

CVE-2023-29824

A use-after-free issue was discovered in PyFindObjects function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue...

PT-2023-9417 · Scipy +6 · Scipy +6

Name of the Vulnerable Software and Affected Versions: SciPy versions prior to 1.8.0 Description: A use-after-free issue was discovered in the Py FindObjects function. The vendor and discoverer indicate that this is not a security issue. The issue is related to the use of memory after it has been...