Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
NumPy <1.19 may crash with crafted negative-sized array
published 1 year ago
Summary
Versions of the NumPy library before 1.19 can run into a memory error when they receive an array that claims to have a negative size, which could cause the program to stop working. The issue only occurs if a user who already has elevated privileges or internal code creates such an array. Upgrade NumPy to version 1.19 or later, or ensure that only trusted code can supply array dimensions.
What to do
- Update echo numpy to version 1.19.0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Echo | echo | numpy |
< 1.19.0 Fix: upgrade to 1.19.0
|
Original advisory text
ECHO-70fc-d0bb-2f7d
References
Timeline
Published15 Sep 2025
Updated5 Apr 2026
First seen5 Apr 2026
Sources
ECHO-70fc-d0bb-2f7d · OSV
Track software like this
Free during beta