CVE-2020-28975

CVE-2020-28975 affects Libsvm v324 (svm_predict_values in svm.cpp), as used by scikit-learn 0.23.2 and related products. An attacker can trigger a denial of service (segmentation fault) by feeding a crafted SVM model with a large value in the _n_support array. Several connected sources confirm th...