The vulnerability of the svm_predict_values function (svm.cpp) in the machine learning library scikit-learn, which allows a hacker to trigger a service failure.

The vulnerability of the svmpredictvalues function in the scikit-learn machine learning library is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2020-28975

CVE-2020-28975 affects Libsvm v324 (svm_predict_values in svm.cpp), as used by scikit-learn 0.23.2 and related products. An attacker can trigger a denial of service (segmentation fault) by feeding a crafted SVM model with a large value in the _n_support array. Several connected sources confirm th...