CVE-2023-25399: Withdrawn: scipy memory leak vulnerability
5.5
CVSS Score
3.1
Basic Information
CVE ID
GHSA ID
EPSS Score
0.37466%
CWE
Published
7/5/2023
Updated
5/14/2024
KEV Status
No
Technology
Python
PythonTechnical Details
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| scipy | pip | < 1.10.0 | 1.10.0 |
Vulnerability Intelligence
Miggo AI
Miggo AIRoot Cause Analysis
The commit diff shows fixes to reference counting in Py_FindObjects:
- Reusing the pre-declared 'tuple' variable instead of creating a new local one ensures proper reference tracking.
- Changing Py_XDECREF to Py_DECREF for 'start/end' variables aligns with the guarantee that these pointers are non-NULL at that point. These changes directly address memory management errors in the original code, confirming Py_FindObjects as the vulnerable function. Though the advisory was withdrawn (as SciPy isn't meant for untrusted input), the technical analysis of the code confirms the refcounting flaw.